admin/activecm-rita
1
0
Fork 0
mirror of https://github.com/activecm/rita synced 2026-06-08 13:02:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
activecm-rita/test_data/json_with_all_fields/open_conn.log
T
Naomi Kramer 906f53b3e5 BEAM ME UP SCOTTY 
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com>
2024-06-28 00:28:25 -04:00

60 lines
25 KiB
Plaintext
Raw Permalink Blame History

{"ts": 1517336042.090842, "uid": "Ci85EB2YjUI9a2eql6", "id.orig_h": "10.55.182.100", "id.orig_p": 14291, "id.resp_h": "10.233.233.5", "id.resp_p": 80, "proto": "tcp", "duration": 3.000158, "orig_bytes": 0, "resp_bytes": 0, "conn_state": "S0", "local_orig": true, "local_resp": true, "missed_bytes": 0, "history": "S", "orig_pkts": 2, "orig_ip_bytes": 104, "resp_pkts": 0, "resp_ip_bytes": 0, "_path": "conn"}
{"ts": 1517336042.279652, "uid": "CVvreZ2AGtqjnP3nnl", "id.orig_h": "192.168.88.2", "id.orig_p": 55638, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.069982, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336052.713711, "uid": "C8f1hD4fyeHXQ9jp79", "id.orig_h": "10.55.100.111", "id.orig_p": 49544, "id.resp_h": "165.227.216.194", "id.resp_p": 443, "proto": "tcp", "duration": 0.064097, "orig_bytes": 0, "resp_bytes": 0, "conn_state": "REJ", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Sr", "orig_pkts": 1, "orig_ip_bytes": 52, "resp_pkts": 1, "resp_ip_bytes": 40, "_path": "conn"}
{"ts": 1517336043.354471, "uid": "C4zL1G2q2YhuW5hCh6", "id.orig_h": "192.168.88.2", "id.orig_p": 28736, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.078779, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336053.289571, "uid": "CL0nHd1LfrJX4NMc21", "id.orig_h": "10.55.100.111", "id.orig_p": 49544, "id.resp_h": "165.227.216.194", "id.resp_p": 443, "proto": "tcp", "duration": 0.077837, "orig_bytes": 0, "resp_bytes": 0, "conn_state": "REJ", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Sr", "orig_pkts": 1, "orig_ip_bytes": 52, "resp_pkts": 1, "resp_ip_bytes": 40, "_path": "conn"}
{"ts": 1517336048.965466, "uid": "CerKw13lGUqBst0Fla", "id.orig_h": "10.55.182.100", "id.orig_p": 14266, "id.resp_h": "192.30.253.112", "id.resp_p": 443, "proto": "tcp", "duration": 0.00043, "orig_bytes": 0, "resp_bytes": 0, "conn_state": "SHR", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "^fA", "orig_pkts": 1, "orig_ip_bytes": 40, "resp_pkts": 1, "resp_ip_bytes": 40, "_path": "conn"}
{"ts": 1517336044.438943, "uid": "CeV48h4Dxmx9mh7qd3", "id.orig_h": "192.168.88.2", "id.orig_p": 42647, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.073451, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336045.517672, "uid": "CKkRMy2TfxbV02Mfc8", "id.orig_h": "192.168.88.2", "id.orig_p": 20440, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.064032, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336051.090978, "uid": "CKIyhj3TkQsp9GsLyc", "id.orig_h": "10.55.182.100", "id.orig_p": 14291, "id.resp_h": "10.233.233.5", "id.resp_p": 80, "proto": "tcp", "conn_state": "S0", "local_orig": true, "local_resp": true, "missed_bytes": 0, "history": "S", "orig_pkts": 1, "orig_ip_bytes": 52, "resp_pkts": 0, "resp_ip_bytes": 0, "_path": "conn"}
{"ts": 1517336046.587421, "uid": "CST5jL2LDLfx36aDJ3", "id.orig_h": "192.168.88.2", "id.orig_p": 39912, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.071484, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336047.665136, "uid": "CChTJ93fyBjt9vTNsb", "id.orig_h": "192.168.88.2", "id.orig_p": 42658, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.072499, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336057.180792, "uid": "CXzZXk3EccEIZZcCJk", "id.orig_h": "10.55.100.111", "id.orig_p": 49545, "id.resp_h": "165.227.216.194", "id.resp_p": 443, "proto": "tcp", "duration": 0.056739, "orig_bytes": 0, "resp_bytes": 0, "conn_state": "REJ", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Sr", "orig_pkts": 1, "orig_ip_bytes": 52, "resp_pkts": 1, "resp_ip_bytes": 40, "_path": "conn"}
{"ts": 1517336057.742766, "uid": "CAY78s2TLBEwMopwZb", "id.orig_h": "10.55.100.111", "id.orig_p": 49545, "id.resp_h": "165.227.216.194", "id.resp_p": 443, "proto": "tcp", "duration": 0.062892, "orig_bytes": 0, "resp_bytes": 0, "conn_state": "REJ", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Sr", "orig_pkts": 1, "orig_ip_bytes": 52, "resp_pkts": 1, "resp_ip_bytes": 40, "_path": "conn"}
{"ts": 1517336048.741779, "uid": "Ck5tpC22orODC7RkA8", "id.orig_h": "192.168.88.2", "id.orig_p": 16271, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.06654, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336053.867668, "uid": "Cb0NQn3YdD9VA1qg3g", "id.orig_h": "10.55.100.111", "id.orig_p": 49544, "id.resp_h": "165.227.216.194", "id.resp_p": 443, "proto": "tcp", "duration": 0.061275, "orig_bytes": 0, "resp_bytes": 0, "conn_state": "REJ", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Sr", "orig_pkts": 1, "orig_ip_bytes": 52, "resp_pkts": 1, "resp_ip_bytes": 40, "_path": "conn"}
{"ts": 1517336049.812569, "uid": "Cggxxq0D12CRFXhgj", "id.orig_h": "192.168.88.2", "id.orig_p": 9373, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.065963, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336050.883618, "uid": "CQXLB24yHbuHS8jP0g", "id.orig_h": "192.168.88.2", "id.orig_p": 56067, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.060626, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336051.948532, "uid": "C1XdcZbhbijgg6ybc", "id.orig_h": "192.168.88.2", "id.orig_p": 56908, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.093769, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336052.042311, "uid": "CImOfO15K4i2P7bJda", "id.orig_h": "192.168.88.2", "id.orig_p": 22670, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.056198, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336053.003657, "uid": "C07bu62dzbWtrebr5", "id.orig_h": "192.168.88.2", "id.orig_p": 65341, "id.resp_h": "165.227.88.15", "id.resp_p": 53, "proto": "udp", "service": "dns", "duration": 0.056776, "orig_bytes": 61, "resp_bytes": 81, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "Dd", "orig_pkts": 1, "orig_ip_bytes": 89, "resp_pkts": 1, "resp_ip_bytes": 109, "_path": "conn"}
{"ts": 1517336223.647412, "uid": "Csvkb240tPgpudGbvd", "id.orig_h": "10.55.100.110", "id.orig_p": 55285, "id.resp_h": "166.78.203.168", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 109.511088, "orig_bytes": 434, "resp_bytes": 567, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 686, "resp_pkts": 5, "resp_ip_bytes": 779, "_path": "conn"}
{"ts": 1517336154.009374, "uid": "CsDSTo3cGyb7sbxsj5", "id.orig_h": "10.55.100.109", "id.orig_p": 52068, "id.resp_h": "52.44.164.170", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.162997, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336162.584099, "uid": "ClmlDRtRxVxeI68pc", "id.orig_h": "10.55.100.109", "id.orig_p": 52135, "id.resp_h": "72.21.91.29", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 1.862542, "orig_bytes": 464, "resp_bytes": 1576, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 6, "orig_ip_bytes": 716, "resp_pkts": 4, "resp_ip_bytes": 1748, "_path": "conn"}
{"ts": 1517336221.699105, "uid": "Cen4LS1FNlGZloD6Th", "id.orig_h": "10.55.100.111", "id.orig_p": 49568, "id.resp_h": "52.55.1.124", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.143904, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336221.982254, "uid": "CV6FHE4E0vnxtx3ST3", "id.orig_h": "10.55.100.100", "id.orig_p": 50259, "id.resp_h": "52.55.1.124", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.145846, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336223.784646, "uid": "CUfZiQ2c73X6kBXPP8", "id.orig_h": "10.55.100.100", "id.orig_p": 50274, "id.resp_h": "52.25.7.108", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 109.470636, "orig_bytes": 5164, "resp_bytes": 52583, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 5896, "resp_pkts": 18, "resp_ip_bytes": 53315, "_path": "conn"}
{"ts": 1517336223.726524, "uid": "CTzf6V3PLeI6B9Fjt9", "id.orig_h": "10.55.100.100", "id.orig_p": 50268, "id.resp_h": "23.52.161.186", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 109.528504, "orig_bytes": 397, "resp_bytes": 465, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfFr", "orig_pkts": 6, "orig_ip_bytes": 649, "resp_pkts": 5, "resp_ip_bytes": 677, "_path": "conn"}
{"ts": 1517336222.070547, "uid": "CScNtt2ZPUfsvQow4d", "id.orig_h": "10.55.100.108", "id.orig_p": 53886, "id.resp_h": "52.44.164.170", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.152192, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336162.64876, "uid": "CP4HnL1chY8ajVKasj", "id.orig_h": "10.55.100.109", "id.orig_p": 52136, "id.resp_h": "72.21.91.29", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 1.797945, "orig_bytes": 232, "resp_bytes": 788, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 5, "orig_ip_bytes": 444, "resp_pkts": 3, "resp_ip_bytes": 920, "_path": "conn"}
{"ts": 1517336221.411334, "uid": "CLqFqD1rPXvGRgcJBl", "id.orig_h": "10.55.100.110", "id.orig_p": 55283, "id.resp_h": "52.44.164.170", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.139029, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336222.375146, "uid": "CKgZnCz1yU1k2arch", "id.orig_h": "10.55.100.105", "id.orig_p": 57899, "id.resp_h": "52.44.164.170", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.169194, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336221.962019, "uid": "CKcU1qed3rZ6Ad9Q5", "id.orig_h": "10.55.100.104", "id.orig_p": 60433, "id.resp_h": "52.44.164.170", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.168379, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336166.481284, "uid": "CIzSVB3v25UJ57J6i", "id.orig_h": "10.55.182.100", "id.orig_p": 14308, "id.resp_h": "23.52.161.212", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 2.155943, "orig_bytes": 213, "resp_bytes": 4632, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 465, "resp_pkts": 6, "resp_ip_bytes": 4884, "_path": "conn"}
{"ts": 1517336222.142604, "uid": "CDps563r2YR5MB3TRd", "id.orig_h": "10.55.100.103", "id.orig_p": 51099, "id.resp_h": "52.55.1.124", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.165942, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336166.389946, "uid": "CDoGYf1dVa4HCX9a7d", "id.orig_h": "10.55.182.100", "id.orig_p": 14307, "id.resp_h": "23.52.162.184", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 60.274186, "orig_bytes": 215, "resp_bytes": 1643, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 6, "orig_ip_bytes": 467, "resp_pkts": 6, "resp_ip_bytes": 1895, "_path": "conn"}
{"ts": 1517336162.681733, "uid": "CCWo4orreGs2jPNm6", "id.orig_h": "10.55.100.109", "id.orig_p": 52137, "id.resp_h": "72.21.91.29", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 1.76508, "orig_bytes": 232, "resp_bytes": 788, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 5, "orig_ip_bytes": 444, "resp_pkts": 4, "resp_ip_bytes": 960, "_path": "conn"}
{"ts": 1517336221.41213, "uid": "CAOYWg3ubRCQ2d1Df", "id.orig_h": "10.55.100.106", "id.orig_p": 50351, "id.resp_h": "52.44.164.170", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.122292, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336223.709818, "uid": "C5kISW3XzUCPjRgD31", "id.orig_h": "10.55.100.107", "id.orig_p": 58465, "id.resp_h": "72.21.91.29", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 110.025321, "orig_bytes": 234, "resp_bytes": 788, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 6, "orig_ip_bytes": 486, "resp_pkts": 5, "resp_ip_bytes": 1000, "_path": "conn"}
{"ts": 1517336221.410866, "uid": "C20GGk4wslMWs3qNd3", "id.orig_h": "10.55.100.107", "id.orig_p": 58461, "id.resp_h": "52.44.164.170", "id.resp_p": 80, "proto": "tcp", "service": "http", "duration": 100.129357, "orig_bytes": 189, "resp_bytes": 401, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 6, "orig_ip_bytes": 441, "resp_pkts": 5, "resp_ip_bytes": 613, "_path": "conn"}
{"ts": 1517336155.874863, "uid": "Cxy1cE8YcFdRF4FA8", "id.orig_h": "10.55.100.109", "id.orig_p": 52071, "id.resp_h": "98.138.252.39", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.559095, "orig_bytes": 453, "resp_bytes": 5084, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 945, "resp_pkts": 11, "resp_ip_bytes": 5536, "_path": "conn"}
{"ts": 1517336156.650548, "uid": "Ct7qKm2MRtt6gZKJx9", "id.orig_h": "10.55.100.109", "id.orig_p": 52079, "id.resp_h": "69.147.92.12", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 7.788586, "orig_bytes": 450, "resp_bytes": 5483, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 10, "orig_ip_bytes": 862, "resp_pkts": 11, "resp_ip_bytes": 5935, "_path": "conn"}
{"ts": 1517336121.068033, "uid": "CsKSMm15OTrmYVM4r9", "id.orig_h": "10.55.100.111", "id.orig_p": 49557, "id.resp_h": "72.21.81.200", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 43.732009, "orig_bytes": 551, "resp_bytes": 9554, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 1043, "resp_pkts": 9, "resp_ip_bytes": 9926, "_path": "conn"}
{"ts": 1517336156.416422, "uid": "CmgX6M2RAetJ4KrVJg", "id.orig_h": "10.55.100.109", "id.orig_p": 52072, "id.resp_h": "98.139.180.180", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.018824, "orig_bytes": 452, "resp_bytes": 5084, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 944, "resp_pkts": 10, "resp_ip_bytes": 5496, "_path": "conn"}
{"ts": 1517336155.874853, "uid": "CmHW8n4JvMKFtSNDce", "id.orig_h": "10.55.100.109", "id.orig_p": 52070, "id.resp_h": "98.138.252.39", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.557752, "orig_bytes": 5394, "resp_bytes": 238790, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 102, "orig_ip_bytes": 9486, "resp_pkts": 104, "resp_ip_bytes": 242962, "_path": "conn"}
{"ts": 1517336156.416564, "uid": "CkmtUbYs0OsBM9rIb", "id.orig_h": "10.55.100.109", "id.orig_p": 52073, "id.resp_h": "98.139.180.180", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.018861, "orig_bytes": 452, "resp_bytes": 5084, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 944, "resp_pkts": 10, "resp_ip_bytes": 5496, "_path": "conn"}
{"ts": 1517336108.139792, "uid": "CjlmYc3CNpKm4v8BTj", "id.orig_h": "10.55.100.100", "id.orig_p": 50255, "id.resp_h": "13.78.179.199", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 63.371943, "orig_bytes": 1365, "resp_bytes": 7136, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADdaFf", "orig_pkts": 14, "orig_ip_bytes": 1937, "resp_pkts": 9, "resp_ip_bytes": 7508, "_path": "conn"}
{"ts": 1517336146.381098, "uid": "CeAyPy1uTaPr8TCjTl", "id.orig_h": "10.55.100.103", "id.orig_p": 51097, "id.resp_h": "64.4.54.254", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 60.669973, "orig_bytes": 3048, "resp_bytes": 4215, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADdaFf", "orig_pkts": 10, "orig_ip_bytes": 3460, "resp_pkts": 8, "resp_ip_bytes": 4547, "_path": "conn"}
{"ts": 1517336108.524239, "uid": "CYEMQ72xi1LMLs8oql", "id.orig_h": "10.55.100.103", "id.orig_p": 51095, "id.resp_h": "13.78.184.186", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 71.538421, "orig_bytes": 1387, "resp_bytes": 7136, "conn_state": "SF", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadFf", "orig_pkts": 15, "orig_ip_bytes": 1999, "resp_pkts": 11, "resp_ip_bytes": 7588, "_path": "conn"}
{"ts": 1517336156.416727, "uid": "CVRSOV1odNSLB3grgj", "id.orig_h": "10.55.100.109", "id.orig_p": 52076, "id.resp_h": "98.139.180.180", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.019037, "orig_bytes": 452, "resp_bytes": 5084, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 944, "resp_pkts": 11, "resp_ip_bytes": 5536, "_path": "conn"}
{"ts": 1517336156.650543, "uid": "CRl9g9k3QHZKZUaI9", "id.orig_h": "10.55.100.109", "id.orig_p": 52080, "id.resp_h": "69.147.92.12", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 7.7886, "orig_bytes": 450, "resp_bytes": 5483, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 942, "resp_pkts": 10, "resp_ip_bytes": 5895, "_path": "conn"}
{"ts": 1517336154.152352, "uid": "CREW6U1jyERgWY3zSj", "id.orig_h": "10.55.100.109", "id.orig_p": 52069, "id.resp_h": "52.44.164.170", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 100.895387, "orig_bytes": 1001, "resp_bytes": 76814, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 5840, "history": "ShADadfR", "orig_pkts": 21, "orig_ip_bytes": 1853, "resp_pkts": 25, "resp_ip_bytes": 77826, "_path": "conn"}
{"ts": 1517336156.416566, "uid": "C9YbC33DIITRfjcKE2", "id.orig_h": "10.55.100.109", "id.orig_p": 52075, "id.resp_h": "98.139.180.180", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.018844, "orig_bytes": 452, "resp_bytes": 5084, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 944, "resp_pkts": 10, "resp_ip_bytes": 5496, "_path": "conn"}
{"ts": 1517336156.651278, "uid": "C8Wswu2EQOXCJBDfrk", "id.orig_h": "10.55.100.109", "id.orig_p": 52083, "id.resp_h": "69.147.92.12", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 7.78462, "orig_bytes": 450, "resp_bytes": 5483, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 13, "orig_ip_bytes": 982, "resp_pkts": 11, "resp_ip_bytes": 5935, "_path": "conn"}
{"ts": 1517336137.723757, "uid": "C7wxEI2w1VfODbHO31", "id.orig_h": "10.55.100.103", "id.orig_p": 51096, "id.resp_h": "13.78.186.254", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 127.373865, "orig_bytes": 1381, "resp_bytes": 7136, "conn_state": "RSTR", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadr", "orig_pkts": 12, "orig_ip_bytes": 1873, "resp_pkts": 10, "resp_ip_bytes": 7548, "_path": "conn"}
{"ts": 1517336156.650683, "uid": "C7267t8RFt8bkJkG8", "id.orig_h": "10.55.100.109", "id.orig_p": 52081, "id.resp_h": "69.147.92.12", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 7.785329, "orig_bytes": 450, "resp_bytes": 5512, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 942, "resp_pkts": 11, "resp_ip_bytes": 5964, "_path": "conn"}
{"ts": 1517336156.650338, "uid": "C6indR1SYa3x5uGt0e", "id.orig_h": "10.55.100.109", "id.orig_p": 52078, "id.resp_h": "69.147.92.12", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 7.784938, "orig_bytes": 11797, "resp_bytes": 853670, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 20440, "history": "ShADadR", "orig_pkts": 291, "orig_ip_bytes": 23449, "resp_pkts": 283, "resp_ip_bytes": 865002, "_path": "conn"}
{"ts": 1517336156.651038, "uid": "C6B2hc3zcPFNpkYc96", "id.orig_h": "10.55.100.109", "id.orig_p": 52082, "id.resp_h": "69.147.92.12", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 7.788259, "orig_bytes": 450, "resp_bytes": 5483, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 12, "orig_ip_bytes": 942, "resp_pkts": 10, "resp_ip_bytes": 5895, "_path": "conn"}
{"ts": 1517336156.416733, "uid": "C3uGCg2PZiXv0EXmXe", "id.orig_h": "10.55.100.109", "id.orig_p": 52077, "id.resp_h": "98.139.180.180", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.019001, "orig_bytes": 5197, "resp_bytes": 742651, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 7300, "history": "ShADadR", "orig_pkts": 262, "orig_ip_bytes": 15689, "resp_pkts": 227, "resp_ip_bytes": 751743, "_path": "conn"}
{"ts": 1517336156.416558, "uid": "C2Xfq11LQij1b1EI73", "id.orig_h": "10.55.100.109", "id.orig_p": 52074, "id.resp_h": "98.139.180.180", "id.resp_p": 443, "proto": "tcp", "service": "ssl", "duration": 8.019177, "orig_bytes": 452, "resp_bytes": 5084, "conn_state": "RSTO", "local_orig": true, "local_resp": false, "missed_bytes": 0, "history": "ShADadR", "orig_pkts": 13, "orig_ip_bytes": 984, "resp_pkts": 10, "resp_ip_bytes": 5496, "_path": "conn"}
Reference in New Issue View Git Blame Copy Permalink