mirror of
https://github.com/activecm/rita
synced 2026-06-08 13:02:45 +00:00
Naomi Kramer
69 lines
8.3 KiB
Plaintext
69 lines
8.3 KiB
Plaintext
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path conn
|
|
#open 2019-02-28-12-07-01
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents
|
|
#types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string]
|
|
1517336042.090842 Ci85EB2YjUI9a2eql6 10.55.182.100 14291 10.233.233.5 80 tcp - 3.000158 0 0 S0 T T 0 S 2 104 0 0 (empty)
|
|
1517336042.279652 CVvreZ2AGtqjnP3nnl 192.168.88.2 55638 165.227.88.15 53 udp dns 0.069982 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336052.713711 C8f1hD4fyeHXQ9jp79 10.55.100.111 49544 165.227.216.194 443 tcp - 0.064097 0 0 REJ T F 0 Sr 1 52 1 40 (empty)
|
|
1517336043.354471 C4zL1G2q2YhuW5hCh6 192.168.88.2 28736 165.227.88.15 53 udp dns 0.078779 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336053.289571 CL0nHd1LfrJX4NMc21 10.55.100.111 49544 165.227.216.194 443 tcp - 0.077837 0 0 REJ T F 0 Sr 1 52 1 40 (empty)
|
|
1517336048.965466 CerKw13lGUqBst0Fla 10.55.182.100 14266 192.30.253.112 443 tcp - 0.000430 0 0 SHR T F 0 ^fA 1 40 1 40 (empty)
|
|
1517336044.438943 CeV48h4Dxmx9mh7qd3 192.168.88.2 42647 165.227.88.15 53 udp dns 0.073451 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336045.517672 CKkRMy2TfxbV02Mfc8 192.168.88.2 20440 165.227.88.15 53 udp dns 0.064032 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336051.090978 CKIyhj3TkQsp9GsLyc 10.55.182.100 14291 10.233.233.5 80 tcp - - - - S0 T T 0 S 1 52 0 0 (empty)
|
|
1517336046.587421 CST5jL2LDLfx36aDJ3 192.168.88.2 39912 165.227.88.15 53 udp dns 0.071484 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336047.665136 CChTJ93fyBjt9vTNsb 192.168.88.2 42658 165.227.88.15 53 udp dns 0.072499 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336057.180792 CXzZXk3EccEIZZcCJk 10.55.100.111 49545 165.227.216.194 443 tcp - 0.056739 0 0 REJ T F 0 Sr 1 52 1 40 (empty)
|
|
1517336057.742766 CAY78s2TLBEwMopwZb 10.55.100.111 49545 165.227.216.194 443 tcp - 0.062892 0 0 REJ T F 0 Sr 1 52 1 40 (empty)
|
|
1517336048.741779 Ck5tpC22orODC7RkA8 192.168.88.2 16271 165.227.88.15 53 udp dns 0.066540 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336053.867668 Cb0NQn3YdD9VA1qg3g 10.55.100.111 49544 165.227.216.194 443 tcp - 0.061275 0 0 REJ T F 0 Sr 1 52 1 40 (empty)
|
|
1517336049.812569 Cggxxq0D12CRFXhgj 192.168.88.2 9373 165.227.88.15 53 udp dns 0.065963 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336050.883618 CQXLB24yHbuHS8jP0g 192.168.88.2 56067 165.227.88.15 53 udp dns 0.060626 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336051.948532 C1XdcZbhbijgg6ybc 192.168.88.2 56908 165.227.88.15 53 udp dns 0.093769 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336052.042311 CImOfO15K4i2P7bJda 192.168.88.2 22670 165.227.88.15 53 udp dns 0.056198 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336053.003657 C07bu62dzbWtrebr5 192.168.88.2 65341 165.227.88.15 53 udp dns 0.056776 61 81 SF T F 0 Dd 1 89 1 109 (empty)
|
|
1517336223.647412 Csvkb240tPgpudGbvd 10.55.100.110 55285 166.78.203.168 80 tcp http 109.511088 434 567 SF T F 0 ShADadfF 6 686 5 779 (empty)
|
|
1517336154.009374 CsDSTo3cGyb7sbxsj5 10.55.100.109 52068 52.44.164.170 80 tcp http 100.162997 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336162.584099 ClmlDRtRxVxeI68pc 10.55.100.109 52135 72.21.91.29 80 tcp http 1.862542 464 1576 RSTO T F 0 ShADadR 6 716 4 1748 (empty)
|
|
1517336221.699105 Cen4LS1FNlGZloD6Th 10.55.100.111 49568 52.55.1.124 80 tcp http 100.143904 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336221.982254 CV6FHE4E0vnxtx3ST3 10.55.100.100 50259 52.55.1.124 80 tcp http 100.145846 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336223.784646 CUfZiQ2c73X6kBXPP8 10.55.100.100 50274 52.25.7.108 80 tcp http 109.470636 5164 52583 SF T F 0 ShADadfF 18 5896 18 53315 (empty)
|
|
1517336223.726524 CTzf6V3PLeI6B9Fjt9 10.55.100.100 50268 23.52.161.186 80 tcp http 109.528504 397 465 SF T F 0 ShADadfFr 6 649 5 677 (empty)
|
|
1517336222.070547 CScNtt2ZPUfsvQow4d 10.55.100.108 53886 52.44.164.170 80 tcp http 100.152192 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336162.648760 CP4HnL1chY8ajVKasj 10.55.100.109 52136 72.21.91.29 80 tcp http 1.797945 232 788 RSTO T F 0 ShADadR 5 444 3 920 (empty)
|
|
1517336221.411334 CLqFqD1rPXvGRgcJBl 10.55.100.110 55283 52.44.164.170 80 tcp http 100.139029 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336222.375146 CKgZnCz1yU1k2arch 10.55.100.105 57899 52.44.164.170 80 tcp http 100.169194 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336221.962019 CKcU1qed3rZ6Ad9Q5 10.55.100.104 60433 52.44.164.170 80 tcp http 100.168379 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336166.481284 CIzSVB3v25UJ57J6i 10.55.182.100 14308 23.52.161.212 80 tcp http 2.155943 213 4632 SF T F 0 ShADadfF 6 465 6 4884 (empty)
|
|
1517336222.142604 CDps563r2YR5MB3TRd 10.55.100.103 51099 52.55.1.124 80 tcp http 100.165942 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336166.389946 CDoGYf1dVa4HCX9a7d 10.55.182.100 14307 23.52.162.184 80 tcp http 60.274186 215 1643 SF T F 0 ShADadFf 6 467 6 1895 (empty)
|
|
1517336162.681733 CCWo4orreGs2jPNm6 10.55.100.109 52137 72.21.91.29 80 tcp http 1.765080 232 788 RSTO T F 0 ShADadR 5 444 4 960 (empty)
|
|
1517336221.412130 CAOYWg3ubRCQ2d1Df 10.55.100.106 50351 52.44.164.170 80 tcp http 100.122292 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336223.709818 C5kISW3XzUCPjRgD31 10.55.100.107 58465 72.21.91.29 80 tcp http 110.025321 234 788 SF T F 0 ShADadFf 6 486 5 1000 (empty)
|
|
1517336221.410866 C20GGk4wslMWs3qNd3 10.55.100.107 58461 52.44.164.170 80 tcp http 100.129357 189 401 SF T F 0 ShADadfF 6 441 5 613 (empty)
|
|
1517336155.874863 Cxy1cE8YcFdRF4FA8 10.55.100.109 52071 98.138.252.39 443 tcp ssl 8.559095 453 5084 RSTO T F 0 ShADadR 12 945 11 5536 (empty)
|
|
1517336156.650548 Ct7qKm2MRtt6gZKJx9 10.55.100.109 52079 69.147.92.12 443 tcp ssl 7.788586 450 5483 RSTO T F 0 ShADadR 10 862 11 5935 (empty)
|
|
1517336121.068033 CsKSMm15OTrmYVM4r9 10.55.100.111 49557 72.21.81.200 443 tcp ssl 43.732009 551 9554 RSTO T F 0 ShADadR 12 1043 9 9926 (empty)
|
|
1517336156.416422 CmgX6M2RAetJ4KrVJg 10.55.100.109 52072 98.139.180.180 443 tcp ssl 8.018824 452 5084 RSTO T F 0 ShADadR 12 944 10 5496 (empty)
|
|
1517336155.874853 CmHW8n4JvMKFtSNDce 10.55.100.109 52070 98.138.252.39 443 tcp ssl 8.557752 5394 238790 RSTO T F 0 ShADadR 102 9486 104 242962 (empty)
|
|
1517336156.416564 CkmtUbYs0OsBM9rIb 10.55.100.109 52073 98.139.180.180 443 tcp ssl 8.018861 452 5084 RSTO T F 0 ShADadR 12 944 10 5496 (empty)
|
|
1517336108.139792 CjlmYc3CNpKm4v8BTj 10.55.100.100 50255 13.78.179.199 443 tcp ssl 63.371943 1365 7136 SF T F 0 ShADdaFf 14 1937 9 7508 (empty)
|
|
1517336146.381098 CeAyPy1uTaPr8TCjTl 10.55.100.103 51097 64.4.54.254 443 tcp ssl 60.669973 3048 4215 SF T F 0 ShADdaFf 10 3460 8 4547 (empty)
|
|
1517336108.524239 CYEMQ72xi1LMLs8oql 10.55.100.103 51095 13.78.184.186 443 tcp ssl 71.538421 1387 7136 SF T F 0 ShADadFf 15 1999 11 7588 (empty)
|
|
1517336156.416727 CVRSOV1odNSLB3grgj 10.55.100.109 52076 98.139.180.180 443 tcp ssl 8.019037 452 5084 RSTO T F 0 ShADadR 12 944 11 5536 (empty)
|
|
1517336156.650543 CRl9g9k3QHZKZUaI9 10.55.100.109 52080 69.147.92.12 443 tcp ssl 7.788600 450 5483 RSTO T F 0 ShADadR 12 942 10 5895 (empty)
|
|
1517336154.152352 CREW6U1jyERgWY3zSj 10.55.100.109 52069 52.44.164.170 443 tcp ssl 100.895387 1001 76814 RSTO T F 5840 ShADadfR 21 1853 25 77826 (empty)
|
|
1517336156.416566 C9YbC33DIITRfjcKE2 10.55.100.109 52075 98.139.180.180 443 tcp ssl 8.018844 452 5084 RSTO T F 0 ShADadR 12 944 10 5496 (empty)
|
|
1517336156.651278 C8Wswu2EQOXCJBDfrk 10.55.100.109 52083 69.147.92.12 443 tcp ssl 7.784620 450 5483 RSTO T F 0 ShADadR 13 982 11 5935 (empty)
|
|
1517336137.723757 C7wxEI2w1VfODbHO31 10.55.100.103 51096 13.78.186.254 443 tcp ssl 127.373865 1381 7136 RSTR T F 0 ShADadr 12 1873 10 7548 (empty)
|
|
1517336156.650683 C7267t8RFt8bkJkG8 10.55.100.109 52081 69.147.92.12 443 tcp ssl 7.785329 450 5512 RSTO T F 0 ShADadR 12 942 11 5964 (empty)
|
|
1517336156.650338 C6indR1SYa3x5uGt0e 10.55.100.109 52078 69.147.92.12 443 tcp ssl 7.784938 11797 853670 RSTO T F 20440 ShADadR 291 23449 283 865002 (empty)
|
|
1517336156.651038 C6B2hc3zcPFNpkYc96 10.55.100.109 52082 69.147.92.12 443 tcp ssl 7.788259 450 5483 RSTO T F 0 ShADadR 12 942 10 5895 (empty)
|
|
1517336156.416733 C3uGCg2PZiXv0EXmXe 10.55.100.109 52077 98.139.180.180 443 tcp ssl 8.019001 5197 742651 RSTO T F 7300 ShADadR 262 15689 227 751743 (empty)
|
|
1517336156.416558 C2Xfq11LQij1b1EI73 10.55.100.109 52074 98.139.180.180 443 tcp ssl 8.019177 452 5084 RSTO T F 0 ShADadR 13 984 10 5496 (empty)
|
|
|