admin/activecm-rita
1
0
Fork 0
mirror of https://github.com/activecm/rita synced 2026-06-08 13:02:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
activecm-rita/test_data/json_with_all_fields/conn.log
T
Naomi Kramer 906f53b3e5 BEAM ME UP SCOTTY 
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com>
2024-06-28 00:28:25 -04:00

30 lines
13 KiB
Plaintext
Raw Permalink Blame History

{"ts": 1517422326.539915, "uid": "CxHo3m4N8uGxrMlcl2", "id.orig_h": "10.55.100.100", "id.orig_p": 61843, "id.resp_h": "205.204.101.182", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 108.985496, "orig_bytes": 719, "resp_bytes": 336, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 20, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 1131, "resp_pkts": 4, "resp_ip_bytes": 508, "_path": "conn"}
{"ts": 1517422385.780131, "uid": "Cj9jo31VXUoMwBTaN1", "id.orig_h": "10.55.100.104", "id.orig_p": 55042, "id.resp_h": "104.16.89.188", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 46.139131, "orig_bytes": 241, "resp_bytes": 489, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 493, "resp_pkts": 5, "resp_ip_bytes": 701, "_path": "conn"}
{"ts": 1517422329.478113, "uid": "CRxE3y1BELqg8AHSeb", "id.orig_h": "10.55.100.106", "id.orig_p": 60613, "id.resp_h": "52.0.211.172", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 105.236949, "orig_bytes": 441, "resp_bytes": 310, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 693, "resp_pkts": 6, "resp_ip_bytes": 562, "_path": "conn"}
{"ts": 1517422326.539212, "uid": "CRniqj3REWkqClLuf", "id.orig_h": "10.55.100.100", "id.orig_p": 61840, "id.resp_h": "205.204.101.182", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 108.986026, "orig_bytes": 1538, "resp_bytes": 672, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 2030, "resp_pkts": 5, "resp_ip_bytes": 884, "_path": "conn"}
{"ts": 1517422326.539666, "uid": "CRWVe54XezFtIlZ2Ec", "id.orig_h": "10.55.100.100", "id.orig_p": 61842, "id.resp_h": "205.204.101.182", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 108.985649, "orig_bytes": 723, "resp_bytes": 336, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 1135, "resp_pkts": 4, "resp_ip_bytes": 508, "_path": "conn"}
{"ts": 1517422326.53942, "uid": "CPoODC4tPhc2WedtR1", "id.orig_h": "10.55.100.100", "id.orig_p": 61841, "id.resp_h": "205.204.101.182", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 108.985823, "orig_bytes": 719, "resp_bytes": 336, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 1131, "resp_pkts": 4, "resp_ip_bytes": 508, "_path": "conn"}
{"ts": 1517422326.423682, "uid": "CB9DKu4WI1kRo88sj6", "id.orig_h": "10.55.100.105", "id.orig_p": 52261, "id.resp_h": "205.204.101.182", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 108.225844, "orig_bytes": 718, "resp_bytes": 336, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 1130, "resp_pkts": 4, "resp_ip_bytes": 508, "_path": "conn"}
{"ts": 1517422329.431675, "uid": "C92mdk4vwuzcZsJl7d", "id.orig_h": "10.55.100.106", "id.orig_p": 60612, "id.resp_h": "52.0.211.172", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 105.283388, "orig_bytes": 464, "resp_bytes": 304, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 716, "resp_pkts": 5, "resp_ip_bytes": 516, "_path": "conn"}
{"ts": 1517422326.00323, "uid": "C0axf33LGfd44hjHt4", "id.orig_h": "10.55.100.100", "id.orig_p": 61828, "id.resp_h": "198.11.132.23", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 109.523093, "orig_bytes": 1843, "resp_bytes": 19801, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 2415, "resp_pkts": 9, "resp_ip_bytes": 20173, "_path": "conn"}
{"ts": 1517422337.389061, "uid": "CktFHnR50Sdn2Ssg5", "id.orig_h": "10.55.100.111", "id.orig_p": 57494, "id.resp_h": "208.89.12.87", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 101.211665, "orig_bytes": 6996, "resp_bytes": 13845, "conn_state": "S1", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADad", "orig_pkts": 32, "orig_ip_bytes": 8288, "resp_pkts": 32, "resp_ip_bytes": 15133, "_path": "conn"}
{"ts": 1517422355.209366, "uid": "ChzkTs6bcBCemLvPl", "id.orig_h": "10.55.100.104", "id.orig_p": 55041, "id.resp_h": "13.78.179.199", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 0.464738, "orig_bytes": 1390, "resp_bytes": 7136, "conn_state": "S1", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADad", "orig_pkts": 11, "orig_ip_bytes": 1842, "resp_pkts": 10, "resp_ip_bytes": 7548, "_path": "conn"}
{"ts": 1517422395.511782, "uid": "CgZojz1v4w0aM5GZ6c", "id.orig_h": "10.55.100.110", "id.orig_p": 65157, "id.resp_h": "13.78.187.58", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 0.409614, "orig_bytes": 1390, "resp_bytes": 7135, "conn_state": "S1", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADad", "orig_pkts": 13, "orig_ip_bytes": 1922, "resp_pkts": 13, "resp_ip_bytes": 7667, "_path": "conn"}
{"ts": 1517422336.853629, "uid": "CbrqwH1I60ijqdvo5k", "id.orig_h": "10.55.100.111", "id.orig_p": 57491, "id.resp_h": "208.89.12.91", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 98.646693, "orig_bytes": 756, "resp_bytes": 6519, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfFR", "orig_pkts": 13, "orig_ip_bytes": 1288, "resp_pkts": 13, "resp_ip_bytes": 7047, "_path": "conn"}
{"ts": 1517422335.993994, "uid": "CVK45n2YhAfzjO1osb", "id.orig_h": "10.55.100.111", "id.orig_p": 57489, "id.resp_h": "208.89.12.153", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 99.56518, "orig_bytes": 460, "resp_bytes": 5305, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 14, "orig_ip_bytes": 1032, "resp_pkts": 13, "resp_ip_bytes": 5833, "_path": "conn"}
{"ts": 1517422336.853822, "uid": "CUvK4P2FQEe55zklqd", "id.orig_h": "10.55.100.111", "id.orig_p": 57490, "id.resp_h": "208.89.12.91", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 98.646194, "orig_bytes": 888, "resp_bytes": 5891, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfFR", "orig_pkts": 13, "orig_ip_bytes": 1420, "resp_pkts": 14, "resp_ip_bytes": 6459, "_path": "conn"}
{"ts": 1517422337.389057, "uid": "CUkrdw1LYGK7JzksDi", "id.orig_h": "10.55.100.111", "id.orig_p": 57493, "id.resp_h": "208.89.12.87", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 10.462595, "orig_bytes": 334, "resp_bytes": 5190, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFR", "orig_pkts": 10, "orig_ip_bytes": 746, "resp_pkts": 9, "resp_ip_bytes": 5558, "_path": "conn"}
{"ts": 1517422417.861123, "uid": "CQIKKS1s2uSOJIENzl", "id.orig_h": "10.55.100.109", "id.orig_p": 62754, "id.resp_h": "64.4.54.253", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 0.418517, "orig_bytes": 945, "resp_bytes": 3993, "conn_state": "S1", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADda", "orig_pkts": 7, "orig_ip_bytes": 1237, "resp_pkts": 6, "resp_ip_bytes": 4245, "_path": "conn"}
{"ts": 1517422336.853819, "uid": "CCsyTNC6hgh4yvKNh", "id.orig_h": "10.55.100.111", "id.orig_p": 57492, "id.resp_h": "208.89.12.91", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 98.646345, "orig_bytes": 930, "resp_bytes": 5891, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfFR", "orig_pkts": 13, "orig_ip_bytes": 1462, "resp_pkts": 13, "resp_ip_bytes": 6419, "_path": "conn"}
{"ts": 1517422335.993984, "uid": "C2nyFQkh6oijTV5hd", "id.orig_h": "10.55.100.111", "id.orig_p": 57488, "id.resp_h": "208.89.12.153", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 99.557465, "orig_bytes": 803, "resp_bytes": 62674, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 28, "orig_ip_bytes": 1935, "resp_pkts": 33, "resp_ip_bytes": 64002, "_path": "conn"}
{"ts": 1517422329.972213, "uid": "C3cF0l1yzVUgQ1a21i", "id.orig_h": "10.55.100.111", "id.orig_p": 57475, "id.resp_h": "198.160.127.57", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 105.614383, "orig_bytes": 529, "resp_bytes": 4093, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFRf", "orig_pkts": 9, "orig_ip_bytes": 901, "resp_pkts": 7, "resp_ip_bytes": 4385, "_path": "conn"}
{"ts": 1517422330.252947, "uid": "CFRzUI2scSY0S6djJ9", "id.orig_h": "10.55.100.111", "id.orig_p": 57480, "id.resp_h": "172.217.6.2", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 105.308261, "orig_bytes": 434, "resp_bytes": 2916, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 11, "orig_ip_bytes": 886, "resp_pkts": 9, "resp_ip_bytes": 3288, "_path": "conn"}
{"ts": 1517422328.29578, "uid": "CKwniS2hPz3SL6cSj", "id.orig_h": "10.55.100.111", "id.orig_p": 57461, "id.resp_h": "172.217.8.198", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 107.272461, "orig_bytes": 425, "resp_bytes": 3323, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 12, "orig_ip_bytes": 917, "resp_pkts": 10, "resp_ip_bytes": 3735, "_path": "conn"}
{"ts": 1517422330.481117, "uid": "C6E7IQ2RKSh2KKjESk", "id.orig_h": "10.55.100.111", "id.orig_p": 57483, "id.resp_h": "172.217.8.196", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 105.076779, "orig_bytes": 1486, "resp_bytes": 4805, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 22, "orig_ip_bytes": 2378, "resp_pkts": 21, "resp_ip_bytes": 5657, "_path": "conn"}
{"ts": 1517420070.880766, "uid": "C4I3Ud25s8z0V6Ywc7", "id.orig_h": "10.55.100.106", "id.orig_p": 60207, "id.resp_h": "65.52.108.188", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 2340.397545, "orig_bytes": 3229, "resp_bytes": 6105, "conn_state": "S1", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADda", "orig_pkts": 38, "orig_ip_bytes": 4761, "resp_pkts": 26, "resp_ip_bytes": 7157, "_path": "conn"}
{"ts": 1517422326.759653, "uid": "CSVvir2rpe6Lxkgt3j", "id.orig_h": "10.55.100.100", "id.orig_p": 61847, "id.resp_h": "198.11.132.47", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 108.76488, "orig_bytes": 1359, "resp_bytes": 5817, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfFR", "orig_pkts": 12, "orig_ip_bytes": 1851, "resp_pkts": 8, "resp_ip_bytes": 6149, "_path": "conn"}
{"ts": 1517422326.39511, "uid": "Cm4FKD1TlCe9T2Yz2c", "id.orig_h": "10.55.100.111", "id.orig_p": 57446, "id.resp_h": "54.215.180.145", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 109.111188, "orig_bytes": 2117, "resp_bytes": 24612, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfFr", "orig_pkts": 22, "orig_ip_bytes": 3009, "resp_pkts": 21, "resp_ip_bytes": 25464, "_path": "conn"}
{"ts": 1517422330.236029, "uid": "C0d9254eUYDWuWcn1l", "id.orig_h": "10.55.100.111", "id.orig_p": 57476, "id.resp_h": "63.140.32.190", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 105.325182, "orig_bytes": 3147, "resp_bytes": 5058, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 13, "orig_ip_bytes": 3679, "resp_pkts": 13, "resp_ip_bytes": 5586, "_path": "conn"}
{"ts": 1517422335.993984, "uid": "C2nyFQkh6oijTV5hd", "id.orig_h": "10.55.100.111", "id.orig_p": 57488, "id.resp_h": "208.89.12.153", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 99.557465, "orig_bytes": 803, "resp_bytes": 62674, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 28, "orig_ip_bytes": 1935, "resp_pkts": 33, "resp_ip_bytes": 64002, "_path": "conn"}
{"ts": 1517422419.710191, "uid": "C5dwJOgEWwpLLN80f", "id.orig_h": "192.168.88.2", "id.orig_p": 123, "id.resp_h": "216.229.4.69", "id.resp_p": 123, "proto": "udp", "duration": 0.048235, "orig_bytes": 48, "resp_bytes": 48, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 76, "resp_pkts": 1, "resp_ip_bytes": 76, "_path": "conn"}
Reference in New Issue View Git Blame Copy Permalink