mirror of
https://github.com/activecm/rita
synced 2026-06-08 13:02:45 +00:00
Naomi Kramer
39 lines
4.5 KiB
Plaintext
39 lines
4.5 KiB
Plaintext
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path conn
|
|
#open 2019-02-28-12-07-01
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents
|
|
#types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string]
|
|
1517422326.539915 CxHo3m4N8uGxrMlcl2 10.55.100.100 61843 205.204.101.182 80 tcp http 108.985496 719 336 SF T F 20 ShADadfF 10 1131 4 508 (empty)
|
|
1517422385.780131 Cj9jo31VXUoMwBTaN1 10.55.100.104 55042 104.16.89.188 80 tcp http 46.139131 241 489 SF T F 0 ShADadfF 6 493 5 701 (empty)
|
|
1517422329.478113 CRxE3y1BELqg8AHSeb 10.55.100.106 60613 52.0.211.172 80 tcp http 105.236949 441 310 SF T F 0 ShADadfF 6 693 6 562 (empty)
|
|
1517422326.539212 CRniqj3REWkqClLuf 10.55.100.100 61840 205.204.101.182 80 tcp http 108.986026 1538 672 SF T F 0 ShADadfF 12 2030 5 884 (empty)
|
|
1517422326.539666 CRWVe54XezFtIlZ2Ec 10.55.100.100 61842 205.204.101.182 80 tcp http 108.985649 723 336 SF T F 0 ShADadfF 10 1135 4 508 (empty)
|
|
1517422326.539420 CPoODC4tPhc2WedtR1 10.55.100.100 61841 205.204.101.182 80 tcp http 108.985823 719 336 SF T F 0 ShADadfF 10 1131 4 508 (empty)
|
|
1517422326.423682 CB9DKu4WI1kRo88sj6 10.55.100.105 52261 205.204.101.182 80 tcp http 108.225844 718 336 SF T F 0 ShADadfF 10 1130 4 508 (empty)
|
|
1517422329.431675 C92mdk4vwuzcZsJl7d 10.55.100.106 60612 52.0.211.172 80 tcp http 105.283388 464 304 SF T F 0 ShADadfF 6 716 5 516 (empty)
|
|
1517422326.003230 C0axf33LGfd44hjHt4 10.55.100.100 61828 198.11.132.23 80 tcp http 109.523093 1843 19801 SF T F 0 ShADadfF 14 2415 9 20173 (empty)
|
|
1517422337.389061 CktFHnR50Sdn2Ssg5 10.55.100.111 57494 208.89.12.87 443 tcp ssl 101.211665 6996 13845 S1 T F 0 ShADad 32 8288 32 15133 (empty)
|
|
1517422355.209366 ChzkTs6bcBCemLvPl 10.55.100.104 55041 13.78.179.199 443 tcp ssl 0.464738 1390 7136 S1 T F 0 ShADad 11 1842 10 7548 (empty)
|
|
1517422395.511782 CgZojz1v4w0aM5GZ6c 10.55.100.110 65157 13.78.187.58 443 tcp ssl 0.409614 1390 7135 S1 T F 0 ShADad 13 1922 13 7667 (empty)
|
|
1517422336.853629 CbrqwH1I60ijqdvo5k 10.55.100.111 57491 208.89.12.91 443 tcp ssl 98.646693 756 6519 SF T F 0 ShADadfFR 13 1288 13 7047 (empty)
|
|
1517422335.993994 CVK45n2YhAfzjO1osb 10.55.100.111 57489 208.89.12.153 443 tcp ssl 99.565180 460 5305 SF T F 0 ShADadFf 14 1032 13 5833 (empty)
|
|
1517422336.853822 CUvK4P2FQEe55zklqd 10.55.100.111 57490 208.89.12.91 443 tcp ssl 98.646194 888 5891 SF T F 0 ShADadfFR 13 1420 14 6459 (empty)
|
|
1517422337.389057 CUkrdw1LYGK7JzksDi 10.55.100.111 57493 208.89.12.87 443 tcp ssl 10.462595 334 5190 RSTO T F 0 ShADadFR 10 746 9 5558 (empty)
|
|
1517422417.861123 CQIKKS1s2uSOJIENzl 10.55.100.109 62754 64.4.54.253 443 tcp ssl 0.418517 945 3993 S1 T F 0 ShADda 7 1237 6 4245 (empty)
|
|
1517422336.853819 CCsyTNC6hgh4yvKNh 10.55.100.111 57492 208.89.12.91 443 tcp ssl 98.646345 930 5891 SF T F 0 ShADadfFR 13 1462 13 6419 (empty)
|
|
1517422335.993984 C2nyFQkh6oijTV5hd 10.55.100.111 57488 208.89.12.153 443 tcp ssl 99.557465 803 62674 SF T F 0 ShADadFf 28 1935 33 64002 (empty)
|
|
1517422329.972213 C3cF0l1yzVUgQ1a21i 10.55.100.111 57475 198.160.127.57 443 tcp ssl 105.614383 529 4093 SF T F 0 ShADadFRf 9 901 7 4385 (empty)
|
|
1517422330.252947 CFRzUI2scSY0S6djJ9 10.55.100.111 57480 172.217.6.2 443 tcp ssl 105.308261 434 2916 SF T F 0 ShADadFf 11 886 9 3288 (empty)
|
|
1517422328.295780 CKwniS2hPz3SL6cSj 10.55.100.111 57461 172.217.8.198 443 tcp ssl 107.272461 425 3323 SF T F 0 ShADadFf 12 917 10 3735 (empty)
|
|
1517422330.481117 C6E7IQ2RKSh2KKjESk 10.55.100.111 57483 172.217.8.196 443 tcp ssl 105.076779 1486 4805 SF T F 0 ShADadFf 22 2378 21 5657 (empty)
|
|
1517420070.880766 C4I3Ud25s8z0V6Ywc7 10.55.100.106 60207 65.52.108.188 443 tcp ssl 2340.397545 3229 6105 S1 T F 0 ShADda 38 4761 26 7157 (empty)
|
|
1517422326.759653 CSVvir2rpe6Lxkgt3j 10.55.100.100 61847 198.11.132.47 443 tcp ssl 108.764880 1359 5817 SF T F 0 ShADadfFR 12 1851 8 6149 (empty)
|
|
1517422326.395110 Cm4FKD1TlCe9T2Yz2c 10.55.100.111 57446 54.215.180.145 443 tcp ssl 109.111188 2117 24612 SF T F 0 ShADadfFr 22 3009 21 25464 (empty)
|
|
1517422330.236029 C0d9254eUYDWuWcn1l 10.55.100.111 57476 63.140.32.190 443 tcp ssl 105.325182 3147 5058 SF T F 0 ShADadFf 13 3679 13 5586 (empty)
|
|
1517422335.993984 C2nyFQkh6oijTV5hd 10.55.100.111 57488 208.89.12.153 443 tcp ssl 99.557465 803 62674 SF T F 0 ShADadFf 28 1935 33 64002 (empty)
|
|
1517422419.710191 C5dwJOgEWwpLLN80f 192.168.88.2 123 216.229.4.69 123 udp - 0.048235 48 48 SF T F 0 Dd 1 76 1 76 (empty)
|
|
#close 2019-02-28-12-12-08
|