[{"_id":{"$oid":"69ed082259a6632dae07de31"},"sha256":"e37c838dc5eaa1b302ffbd8721c6a5f52a068e8f78bbec63b19b950462fe6cf8","timestamp":{"$date":"2026-04-28T14:18:13.880Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_h8b85qx9.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #7\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1....LD..6U..RC...H-\n#########################################\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #57\n220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------.\n220-You are user number 1 of 50 allowed..\n220-Local time is now 17:31. Server port: 21..\n220-This is a private system - No anonymous login.\n220-IPv6 connections are also welcome on this server..\n220 You will be disconnected after 15 minutes of inactivity..\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #58\nAUTH TLS.\"\n0.0,NGrep,##,\"Payload: T 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #60\n234 AUTH TLS OK..\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #61\n...........i.v..a..b..3...K.NL...G:..........*.,.+.0./.....$.#.(.'.\n...........=.<.5./.\n...U.........ftp.henfruit.ro.\n...............................................#...........\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #63\n....a...]..\\3...r..q...A...x>..M=..DOWNGRD. ..P....#..D.x.H;a....U=......eq..0...........................\n...\n..\n....0...0............?Y.d.j.x..d...t.0...*.H........031.0...U....US1.0...U.\n..Let's Encrypt1.0\n..U....R130...260331071445Z..260629071444Z0.1.0...U....mgh-web9.maghost.ro0..\"\"0...*.H.............0..\n.......U..{W\n..`..P....0.Ep..M.\\)GL..+..G......v...}z.{...2.Z.GL0.W..x.l..*.|uBK!.!.dS..PAe..rBf..P.....l....... q.S^.r_YZ.M&...K..o...|.7..x.NUh.1.D..Dd.B...'._.'+....g.Y...I...4H.Dh.P....n....Cq...j%.\nh..h..)1.Ob...q$..=^Y.........7..#X+..z@....Q....N.....]..........!0...0...U...........0...U.%..0\n..+.......0...U.......0.0...U........>*s9#R..f.m.@.t...0...U.#..0.......,3.S.^Ox....;..303..+........'0%0#..+.....0...http://r13.i.lencr.org/0...U....0...mgh-web9.maghost.ro0...U. ..0\n0...g.....0/..U...(0&0$.\"\". ..http://r13.c.lencr.org/106.crl0....\n+.....y............}.q~...8.m...I=1.Z.b.v-B.....g..a.....B.;.........y....F0D. GR|..5..%`....'.m.....3.}.6e&.... ..(..f..Fk..ge.f\"\"..Z....Y...S....v..n..h.~f5.?7.....<A.......1.#.......B.<......G0E. .....w..L(p..a.v.a@f..~.......=..!...O......L[.&..*......a4k.....LS0...*.H.............[.V..bxAd.5>{....|...d.Y.. g[........4|.r....3A...8Rk$.mA....n.6.4..x..(..%.<.lWH...P....T._..c(.....(...3._T.w..:;....S..i4Z.j.50..2.% ...y..fSA..m......_.. '..^#.4..].t).....C.G..!....!.......j.U.R...z..4E.v.|...@.....4.U.B.9.&......_.7.4...s..b.4.+..P.....0...0..........Z.........AW.)..0...*.H........0O1.0...U....US1)0'..U.\n. Internet Security Research Group1.0...U....ISRG Root X10...240313000000Z..270312235959Z031.0...U....US1.0...U.\n..Let's Encrypt1.0\n..U....R130..\"\"0...*.H.............0..\n......gp..V.d..a........&P7..c.T............`QCH}+.H...-...';W........0.o......2>XN5oEXhq..>.]../.Ql..].Y.5e.....7...].I.4..+....q,..........^|........\n]..{..vBp..M\"\"..wo.._...u..W...\\..s.h..t.u.~........8.\nD.....I5.\n4.....GN..\n6.GO..).u....\\.^.....C.J.....0.2..........0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U..........,3.S.^Ox....;..30...U.#..0...y.Y.{....s.....X...n02..+........&0$0\"\"..+.....0...http://x1.i.lencr.org/0...U. ..0\n0...g.....0'..U... 0.0.......http://x1.c.lencr.org/0...*.H.............Q7XR.\"\".5.M........T....;...pr.e. }.Cr........./.^...#|...z.o.q.........\"\"......u.......\\W*..p.Mp..?.k.7hEL'd......~Z@..(..;..\\...n.m..8..........Y.n/.4.......+.z~............ar|..4..\"\"0..P\"\".d\n...........C\"\".....m...2.......%..,...o...4..I.e..........p.Z......[..5..,Ju.l^...h..D*U.........;...A+.....o.h...\\....[.~......Q^Z...h.....5.....Z.k..-}.LcS^X.i.S...$}s...d.|..d.l.o*.........D.i+.P.qu.%.^I.Z..8Fr..iq..TA.._.U....6.H=...#--+gbDCKH]...pm....Ex[7.[.U.E[.....V.+.-\n....P.....w--.g!..*...Y..%4...a.JG.Vn|!w........,...(... ....q.P.OlG(.}\\.w\"\"Bd..iX|D..T..J.........&..B)...Sa........K....ov.T.N.[...*..1<O.....\"\"S3..x.........N@..r&4..Ldw....d...S...>...2.zv....,...u.5.B{.... .f....[>.kg..{{.R.gQQ.r.C.+...a\"\"..o....;.=..sz...I..v..ul...D.<F.$&.>...8.&E...g.'N.t...<....j. .D.......i....:.o#..../.T......y....J?....\nu.........\n##\nT 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #65\n....%...! ))..Gi.@....L..h&...d..ds..m.N............(..........3..;.@......Y..x..}..9li...x.}\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #67\n..........(....6vB*NL.o..A;`..v5.....Ip.S...~. ..L.\n##\nT 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #69\n....1.........d...Z.....:...'.....CHSf...N.(.En0....Zd\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #71\n....K....6vB+Oi_..R....P3.i...=.S0_@.]l....v.......^....LR.d.M....>b.]P..(...m..\n#\nT 192.168.122.168:50578 -> 91.213.188.9:21 [AP] #72\n....,........F...9........(...d2...D.S.Qo..#....b\n##\nT 91.213.188.9:21 -> 192.168.122.168:50578 [AP] #74\n....E....6vB,).b.v....b2J{cc.uC<.^:......Tm;..7A...P.Hu....J..I.H....q~.#.\n####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmptku6wxz7/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-28T14:18:11.705921,Tool:tmptku6wxz7/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmptku6wxz7/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-28T14:18:11.708848,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmptku6wxz7/carved/scalpel/audit.txt,610,2447c38f546393de810c35a944d62d07,0c201d6afef6814df7a93342790ea675704f09db8f87c490deb352a2e46aba01,5.06,\"Scalpel version 1.60 audit file, Started at Tue Apr 28 14:18:11 2026, Command line:, scalpel -c /tmp/tmptku6wxz7/carved/scalpel.conf /tmp/filtered_h8b85qx9.pcap -o /tmp/tmptku6wxz7/carved/scalpel , Output directory: /tmp/tmptku6wxz7/carved/scalpel, Configuration file: /tmp/tmptku6wxz7/carved/scalpel.conf, Opening target , /tmp/filtered_h8b85qx9.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000001.gif         5915, YES               0, filtered_h8b85qx9.pcap, 00000000.gif         5915, YES               0, filtered_h8b85qx9.pcap, Completed at Tue Apr 28 14:18:11 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 20 35 39 31 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 35 39 31 35 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a\n2026-04-28T14:18:11.702253,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmptku6wxz7/carved/foremost/audit.txt,700,be6e60f14fd6724070c2449c2d494918,6d0fc11526daa1da3ea2a274faef3eeaa82435596a1ea9ef7fab35f6c34f2588,4.93,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Tue Apr 28 14:18:11 2026, Invocation: foremost -t all -i /tmp/filtered_h8b85qx9.pcap -o /tmp/tmptku6wxz7/carved/foremost , Output directory: /tmp/tmptku6wxz7/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_h8b85qx9.pcap, Start: Tue Apr 28 14:18:11 2026, Length: 13 KB (13720 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Tue Apr 28 14:18:11 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Tue Apr 28 14:18:11 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 74 6b 75 36 77 78 7a 37 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 68 38 62 38 35 71 78 39 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 31 33 20 4b 42 20 28 31 33 37 32 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 38 3a 31 31 20 32 30 32 36 0a\n2026-04-28T14:18:11.708848,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmptku6wxz7/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-28T14:18:11.708848,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmptku6wxz7/carved/scalpel/gif-4-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,78,10937,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,53,5630,33.97%,25.74%\n50578,25,5307,16.03%,24.26%\n21,25,5307,16.03%,24.26%\n49899,9,1278,5.77%,5.84%\n49892,9,2462,5.77%,11.26%\n49957,7,378,4.49%,1.73%\n49956,7,378,4.49%,1.73%\n49955,7,378,4.49%,1.73%\n49958,7,378,4.49%,1.73%\n49954,7,378,4.49%,1.73%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-26 14:26:16.978934,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:17.291470,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:17.900813,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:19.103914,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:19.459364,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59585, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:19.760137,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:20.317697,7,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb703000080062954c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)T..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46851, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10580, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:20.364609,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:21.520764,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:21.567614,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb7060000800628bdc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68690c06906a97126bc83f8d555f4333039f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78b4c4419d136559ba352439885fe482d,\"RT.W..RT.{....E.........(...z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10429, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:22.770657,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb7070000800628bcc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68690c06906a97126bc83f8d555f4333039f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78b4c4419d136559ba352439885fe482d,\"RT.W..RT.{....E.........(...z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:23.926862,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:23.973748,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb70940008006e8b9c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68690c06906a97126bc83f8d555f4333039f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78b4c4419d136559ba352439885fe482d,\"RT.W..RT.{....E....\t@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:26.386448,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb70a40008006e8b8c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68690c06906a97126bc83f8d555f4333039f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78b4c4419d136559ba352439885fe482d,\"RT.W..RT.{....E....\n@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:28.800596,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:31.207642,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....i..q&....U.309.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1....LD..6U..RC...H-\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59574, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x90\\\\xc0i\\\\x06\\\\xa9q&\\\\xbc\\\\x83\\\\xf8\\\\xd5U\\\\xf4309\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8bLD\\\\x19\\\\xd16U\\\\x9b\\\\xa3RC\\\\x98\\\\x85\\\\xfeH-\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 14:26:38.415325,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:26:40.806974,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411404 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148c51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411404, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.537736,19,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a19400080065cfdc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10777, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.537938,20,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a510400080067473c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...ts..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29811, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.538179,21,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592a4000800654ecc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y*@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22826, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21740, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.540809,22,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280154400080062bfdc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.T@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 340, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11261, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.540862,23,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dc400080069f99c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40857, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.886229,24,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1a400080065cfcc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10778, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23804, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.886259,25,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592b4000800654ebc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y+@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22827, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21739, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.964322,26,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a511400080067472c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tr..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29810, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.964448,27,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280155400080062bfcc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.U@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 341, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11260, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:31.964472,28,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dd400080069f98c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40856, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.566196,29,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a512400080067471c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tq..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29809, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.566245,30,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280156400080062bfbc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.V@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 342, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11259, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.566261,31,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812de400080069f97c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40855, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.581699,32,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1b400080065cfbc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10779, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23803, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:32.581767,33,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592c4000800654eac0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y,@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21738, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.784793,34,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1c400080065cfac0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10780, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23802, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.784891,35,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592d4000800654e9c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y-@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.853838,36,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a513400080067470c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tp..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29808, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.853919,37,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280157400080062bfac0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.W@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 343, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11258, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:33.853936,38,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812df400080069f96c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40854, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.284163,39,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1d400080065cf9c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10781, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.284220,40,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592e4000800654e8c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y.@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.362379,41,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51440008006746fc0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...to..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42260, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29807, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.362465,42,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280158400080062bf9c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.X@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11257, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:36.362483,43,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e0400080069f95c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.085381,44,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1e400080065cf8c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10782, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.085449,45,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592f4000800654e7c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y/@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.163498,46,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51540008006746ec0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tn..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42261, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29806, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.163578,47,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280159400080062bf8c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.Y@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11256, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:41.163595,48,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e1400080069f94c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4833, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40852, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.778945,49,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=4194378439 Ack=1765244119,525400577f945254007bb7920800450000282a1f400080065cf7c0a87aa80d6b2afec32501bbfa0122c769377cd75014000073d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10783, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23799, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378439, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.779057,50,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,RA,,,Ether > IP > TCP,3,TCP RA Seq=654304945 Ack=1203919404,525400577f945254007bb79208004500002859304000800654e6c0a87aa80d6b03fec32301bb26ffe6b147c25a2c501400004cd40000,\"RT.W..RT.{....E..(Y0@...T...z.\nk...#..&...G.Z,P...L...\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21734, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304945, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.857066,51,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,RA,,,Ether > IP > TCP,3,TCP RA Seq=1857739734 Ack=4241599660,525400577f945254007bb792080045000028a51640008006746dc0a87aa883fd21fec32401bb6ebadbd6fcd1acac50140000e1660000,RT.W..RT.{....E..(..@...tm..z...!..$..n.......P....f..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42262, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739734, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.857168,52,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=4216733384 Ack=974826609,525400577f945254007bb792080045000028015a400080062bf7c0a87aa8cc4fc5dec32601bbfb563ec83a1aac7150140000cd990000,RT.W..RT.{....E..(.Z@...+...z..O...&...V>.:..qP.......,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11255, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733384, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:28:50.857188,53,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=226525660 Ack=1444010957,525400577f945254007bb79208004500002812e2400080069f93c0a87aa81730f5d9c32201bb0d8081dc5611dbcd5014000048750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4834, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40851, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525660, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:10.011506,54,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=4242042959 Ack=0,525400577f945254007bb792080045000034dc5e40008006cb35c0a87aa85bd5bc09c5920015fcd8704f000000008002faf053560000020405b40103030801010402,RT.W..RT.{....E..4.^@....5..z.[..\t......pO........SV..............,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 56414, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52021, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042959, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 21334, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 14:31:10.011559,55,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4028115492 Ack=4242042960,5254007bb792525400577f94080045000034000040004006e7945bd5bc09c0a87aa80015c592f0182a24fcd870508012a56453560000020405b40101040201030309,RT.{..RT.W....E..4..@.@...[..\t..z.......*$..pP...dSV.............\t,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59284, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115492, \"\"ack\"\": 4242042960, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 21334, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 14:31:10.011700,56,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242042960 Ack=4028115493,525400577f945254007bb792080045000028dc5f40008006cb40c0a87aa85bd5bc09c5920015fcd87050f0182a2550100402534a0000,RT.W..RT.{....E..(._@....@..z.[..\t......pP..*%P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56415, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52032, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042960, \"\"ack\"\": 4028115493, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:20.775338,57,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028115493 Ack=4242042960,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,\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\n220-You are user number 1 of 50 allowed.\n220-Local time is now 17:31. Server port: 21.\n220-This is a private system - No anonymous login\n220-IPv6 connections are also welcome on this server.\n220 You will be disconnected after 15 minutes of inactivity.\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 360, \"\"id\"\": 37367, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21609, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115493, \"\"ack\"\": 4242042960, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21642, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 17:31. Server port: 21.\\r\\n220-This is a private system - No anonymous login\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"\"}}]\"\n2026-04-26 14:31:20.775728,58,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242042960 Ack=4028115813,525400577f945254007bb792080045000032dc6040008006cb35c0a87aa85bd5bc09c5920015fcd87050f0182b6550180401535400004155544820544c530d0a,\"AUTH TLS\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 50, \"\"id\"\": 56416, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52021, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042960, \"\"ack\"\": 4028115813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21332, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"AUTH TLS\\r\\n\"\"}}]\"\n2026-04-26 14:31:20.775759,59,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028115813 Ack=4242042970,5254007bb792525400577f9408004500002891f84000400655a85bd5bc09c0a87aa80015c592f0182b65fcd8705a50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......+e..pZP..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37368, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21928, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115813, \"\"ack\"\": 4242042970, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:21.206814,60,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028115813 Ack=4242042970,5254007bb792525400577f9408004500003a91f94000400655955bd5bc09c0a87aa80015c592f0182b65fcd8705a50180053535c0000323334204155544820544c53204f4b2e0d0a,\"234 AUTH TLS OK.\n\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 58, \"\"id\"\": 37369, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21909, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115813, \"\"ack\"\": 4242042970, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21340, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"234 AUTH TLS OK.\\r\\n\"\"}}]\"\n2026-04-26 14:31:21.220781,61,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242042970 Ack=4028115831,525400577f945254007bb7920800450000d9dc6140008006ca8dc0a87aa85bd5bc09c5920015fcd8705af0182b775018040153fb000016030300ac010000a8030369d776ed8561b0aa62d9d4331996034bbe4e4cc598bb473af9aaa4039eec9fd800002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a0100005500000014001200000f6674702e68656e66727569742e726f000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\"...........i.v..a..b..3...K.NL...G:..........*.,.+.0./.....$.#.(.'.\n.\t.........=.<.5./.\n...U.........ftp.henfruit.ro.\n.................\n.............................#...........\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 217, \"\"id\"\": 56417, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242042970, \"\"ack\"\": 4028115831, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21499, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"16030300ac010000a8030369d776ed8561b0aa62d9d4331996034bbe4e4cc598bb473af9aaa4039eec9fd800002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a0100005500000014001200000f6674702e68656e66727569742e726f000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100\"\"}}]\"\n2026-04-26 14:31:21.220806,62,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028115831 Ack=4242043147,5254007bb792525400577f9408004500002891fa4000400655a65bd5bc09c0a87aa80015c592f0182b77fcd8710b50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......+w..q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37370, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21926, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115831, \"\"ack\"\": 4242043147, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:21.619811,63,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028115831 Ack=4242043147,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,\"....a...]..\\3...r..q...A...x>..M=..DOWNGRD. ..P....#..D.x.H;a....U=......eq..0...........................\n...\n..\n....0...0............?Y.d.j.x..d...t.0\n.\t*.H..\n.....031.0\t..U....US1.0...U.\n.\nLet's Encrypt1.0\n..U....R130..\n260331071445Z.\n260629071444Z0.1.0...U....mgh-web9.maghost.ro0..\"\"0\n.\t*.H..\n..........0..\n.......U..{W\n..`..P....0.Ep..M.\\)GL..+..G......v...}z.{...2.Z.GL0.W..x.l..*.|uBK!.!.dS..PAe..rBf..P.....l....... q.S^.r_YZ.M&...K..o...|.7..x.NUh.1.D..Dd.B...'._.'+....g.Y...I...4H.Dh.P....n....Cq...j%.\nh..h..)1.Ob...q$..=^Y.........7..#X+..z@....Q....N.....]..........!0...0...U...........0...U.%..0\n..+.......0...U.......0.0...U........>*s9#R..f.m.@.t...0...U.#..0.......,3.S.^Ox....;..303..+........'0%0#..+.....0...http://r13.i.lencr.org/0...U....0...mgh-web9.maghost.ro0...U. ..0\n0...g.....0/..U...(0&0$.\"\". ..http://r13.c.lencr.org/106.crl0....\n+.....y............}.q~...8.m...I=1.Z.b.v-B.....g..a.....B.;.......\n.y....F0D. GR|..5..%`....'.m.....3.}.6e&.... ..(..f..Fk..ge.f\"\"..Z....Y...S....v..n..h.~f5.?7.....<A.......1.#.......B.<......G0E. ....\tw..L(p..a.v.a@f..~.......=..!...O...\t..L[.&..*......a4k.....LS0\n.\t*.H..\n..........[.V..bxAd.5>{.\t..|...d.Y.. g[........4|.r....3A...8Rk$.mA....n.6.4..x..(..%.<.lWH...P....T._..c(.....(...3._T.w..:;....S..i4Z.j.50..2.% ...y..fSA..m......_.. '.\n^#.4..].t).....C.G..!....!.......j.U.R...z..4E.v.|..\n@.....4.U.B.9.&......_.7.4...s..b.4.+..P....\t0...0..........Z.........AW.)..0\n.\t*.H..\n.....0O1.0\t..U....US1)0'..U.\n. Internet Security Research Group1.0...U....ISRG Root X10..\n240313000000Z.\n270312235959Z031.0\t..U....US1.0...U.\n.\nLet's Encrypt1.0\n..U....R130..\"\"0\n.\t*.H..\n..........0..\n......gp..V.d..a........&P7..c.T............`QCH}+.H...-...';W........0.o......2>XN5oEXhq..>.]../.Ql..].Y.5e.....7...].I.4..+....q,..........^|........\n]..{..vBp..M\"\"..wo.._...u..W...\\..s.h..t.u.~........8.\nD.....I5.\n4.....GN..\n6.GO..).u....\\.^.....C.J.....0.2..........0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U..........,3.S.^Ox....;..30...U.#..0...y.Y.{....s.....X...n02..+........&0$0\"\"..+.....0...http://x1.i.lencr.org/0...U. ..0\n0...g.....0'..U... 0.0.......http://x1.c.lencr.org/0\n.\t*.H..\n..........Q7XR.\"\".5.M.....\t..T....;...pr.e. }.Cr........./.^...#|...z\no.q.........\"\"......u.......\\W*..p.Mp..?.k.7hEL'd......~Z@..(..;..\\...n.m..8..........Y.n/.4.......+.z~............ar|..4..\"\"0..P\"\".d\n...........C\"\".....m...2.......%..,...o...4..I.e..........p.Z.....\t[..5..,Ju.l^...h..D*U.........;...A+.....o.h...\\....[.~.....\tQ^Z...h.....5.....Z.k..-}.LcS^X.i.S...$}s...d.|..d.l.o*......\t..D.i+.P.qu.%.^I.Z..8Fr..iq..TA.._.U....6.H=...#--+gbDCKH]...pm....Ex[7.[.U.E[.....V.+\t-\n....P.....w--.g!..*...Y..%4...a.JG.Vn|!w........,...(... ....q.P.OlG(.}\\.w\"\"Bd..iX|D..T..J.........&..B)...Sa........K....ov.T.N.[...*..1<O.....\"\"S3..x.........N@..r&4..Ldw....d...S...>...2.zv....,...u.5.B{.... .f....[>.kg..{{.R.gQQ.r.C.+...a\"\"..o....;.=..sz...I..v.\tul...D.<F.$&.>...8.&E...g.'N.t...<..\n.j. .D.......i....:.o#..../.T......y....J?....\nu.........\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3047, \"\"id\"\": 37371, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18918, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028115831, \"\"ack\"\": 4242043147, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 24329, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-26 14:31:21.620002,64,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242043147 Ack=4028118838,525400577f945254007bb792080045000028dc6240008006cb3dc0a87aa85bd5bc09c5920015fcd8710bf018373650100402534a0000,RT.W..RT.{....E..(.b@....=..z.[..\t......q...76P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56418, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52029, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043147, \"\"ack\"\": 4028118838, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:21.660193,65,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242043147 Ack=4028118838,525400577f945254007bb792080045000085dc6340008006cadfc0a87aa85bd5bc09c5920015fcd8710bf01837365018040253a700001603030025100000212029299fb24769f840d7c1d6e44c95c36826efdd8164b71a64738ced6dd24e0c1d14030300010116030300280000000000000000aab233e3f23bb240c389cd0b99d959ffaa788ca37d1904396c69cf860278b17d,....%...! ))..Gi.@....L..h&...d..ds..m.N............(..........3..;.@......Y..x..}..9li...x.},[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 133, \"\"id\"\": 56419, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51935, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043147, \"\"ack\"\": 4028118838, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21415, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1603030025100000212029299fb24769f840d7c1d6e44c95c36826efdd8164b71a64738ced6dd24e0c1d14030300010116030300280000000000000000aab233e3f23bb240c389cd0b99d959ffaa788ca37d1904396c69cf860278b17d\"\"}}]\"\n2026-04-26 14:31:21.660223,66,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028118838 Ack=4242043240,5254007bb792525400577f9408004500002891fe4000400655a25bd5bc09c0a87aa80015c592f0183736fcd8716850100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......76..qhP..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37374, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21922, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118838, \"\"ack\"\": 4242043240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.043482,67,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028118838 Ack=4242043240,5254007bb792525400577f9408004500005b91ff40004006556e5bd5bc09c0a87aa80015c592f0183736fcd8716850180053537d00001403030001011603030028e006c7a13676422a4e4cd16f04ff413b60801e76351b9d130db34970a953918fe57ed120bd8d4cb1,\"..........(....6vB*NL.o..A;`..v5...\n.Ip.S...~. ..L.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 91, \"\"id\"\": 37375, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21870, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118838, \"\"ack\"\": 4242043240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21373, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1403030001011603030028e006c7a13676422a4e4cd16f04ff413b60801e76351b9d130db34970a953918fe57ed120bd8d4cb1\"\"}}]\"\n2026-04-26 14:31:22.099332,68,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242043240 Ack=4028118889,525400577f945254007bb792080045000028dc6440008006cb3bc0a87aa85bd5bc09c5920015fcd87168f018376950100402534a0000,RT.W..RT.{....E..(.d@....;..z.[..\t......qh..7iP...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56420, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52027, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043240, \"\"ack\"\": 4028118889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.174321,69,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242043240 Ack=4028118889,525400577f945254007bb79208004500005edc6540008006cb04c0a87aa85bd5bc09c5920015fcd87168f01837695018040253800000170303003100000000000000018264e28fc05a14fa82a0a03a18112e2786e4b3fec343485366b3e5a74e8d280e456e30cfc18ede5a64,....1.........d...Z.....:...'.....CHSf...N.(.En0....Zd,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 94, \"\"id\"\": 56421, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51972, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043240, \"\"ack\"\": 4028118889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21376, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"170303003100000000000000018264e28fc05a14fa82a0a03a18112e2786e4b3fec343485366b3e5a74e8d280e456e30cfc18ede5a64\"\"}}]\"\n2026-04-26 14:31:22.174345,70,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028118889 Ack=4242043294,5254007bb792525400577f9408004500002892004000400655a05bd5bc09c0a87aa80015c592f0183769fcd8719e50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......7i..q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37376, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21920, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118889, \"\"ack\"\": 4242043294, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.551505,71,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028118889 Ack=4242043294,5254007bb792525400577f94080045000078920140004006554f5bd5bc09c0a87aa80015c592f0183769fcd8719e50180053539a0000170303004be006c7a13676422b4f695ff1e0520dcf87c65033ea69e0c7e73dd153305f40a05d6c07ad13a076faf11a03a6b5fe5ed8eadc834c520b64eb4d961a90d53e62935d50dec12889f78d6dd3dd,\"....K....6vB+Oi_..R\n...P3.i...=.S0_@.]l....v.......^....LR.d.M....>b.]P..(...m..\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 120, \"\"id\"\": 37377, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21839, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118889, \"\"ack\"\": 4242043294, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21402, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"170303004be006c7a13676422b4f695ff1e0520dcf87c65033ea69e0c7e73dd153305f40a05d6c07ad13a076faf11a03a6b5fe5ed8eadc834c520b64eb4d961a90d53e62935d50dec12889f78d6dd3dd\"\"}}]\"\n2026-04-26 14:31:22.551986,72,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4242043294 Ack=4028118969,525400577f945254007bb792080045000059dc6640008006cb08c0a87aa85bd5bc09c5920015fcd8719ef01837b950180402537b0000170303002c00000000000000024697a11739fd827fa1ddd4e7db2893a2e3643212121344c653a6516f909c23ada799a362,\"....,........F...9........(...d2...D.S.Qo..#....b\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 89, \"\"id\"\": 56422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 51976, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043294, \"\"ack\"\": 4028118969, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 21371, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"170303002c00000000000000024697a11739fd827fa1ddd4e7db2893a2e3643212121344c653a6516f909c23ada799a362\"\"}}]\"\n2026-04-26 14:31:22.552008,73,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028118969 Ack=4242043343,5254007bb792525400577f94080045000028920240004006559e5bd5bc09c0a87aa80015c592f01837b9fcd871cf50100053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......7...q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21918, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118969, \"\"ack\"\": 4242043343, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.998330,74,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4028118969 Ack=4242043343,5254007bb792525400577f9408004500007292034000400655535bd5bc09c0a87aa80015c592f01837b9fcd871cf50180053539400001703030045e006c7a13676422c299b62fd76da848aaf62324a7b63639575433cdf5e3ab18c05b6bf05546d3babb23741e709e250d64875a3a589bb4aa31c49c348c1cf14fd717e8223c8,\"....E....6vB,).b.v....b2J{cc.uC<.^:......Tm;..7A.\t.P.Hu....J..I.H....q~.#.\",[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 114, \"\"id\"\": 37379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21843, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028118969, \"\"ack\"\": 4242043343, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21396, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"1703030045e006c7a13676422c299b62fd76da848aaf62324a7b63639575433cdf5e3ab18c05b6bf05546d3babb23741e709e250d64875a3a589bb4aa31c49c348c1cf14fd717e8223c8\"\"}}]\"\n2026-04-26 14:31:22.998360,75,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4028119043 Ack=4242043343,5254007bb792525400577f94080045000028920440004006559c5bd5bc09c0a87aa80015c592f0183803fcd871cf50110053534a0000,RT.{..RT.W....E..(..@.@.U.[..\t..z.......8...q.P..SSJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 37380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 21916, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028119043, \"\"ack\"\": 4242043343, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:22.998523,76,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4242043343 Ack=4028119044,525400577f945254007bb792080045000028dc6740008006cb38c0a87aa85bd5bc09c5920015fcd871cff018380450100401534a0000,RT.W..RT.{....E..(.g@....8..z.[..\t......q...8.P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56423, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52024, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043343, \"\"ack\"\": 4028119044, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:23.009485,77,TCP 192.168.122.168:50578 -> 91.213.188.9:21,192.168.122.168,91.213.188.9,50578,21,TCP,Internal,Private Network,,,,,,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4242043343 Ack=4028119044,525400577f945254007bb792080045000028dc6840008006cb37c0a87aa85bd5bc09c5920015fcd871cff018380450110401534a0000,RT.W..RT.{....E..(.h@....7..z.[..\t......q...8.P...SJ..,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 52023, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"91.213.188.9\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50578, \"\"dport\"\": 21, \"\"seq\"\": 4242043343, \"\"ack\"\": 4028119044, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 21322, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 14:31:23.009517,78,TCP 91.213.188.9:21 -> 192.168.122.168:50578,91.213.188.9,192.168.122.168,21,50578,TCP,Romania,Unknown,49468,Magit'st Srl,45.9968,24.997,91.213.188.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4028119044 Ack=4242043344,5254007bb792525400577f94080045000028000040004006e7a05bd5bc09c0a87aa80015c592f0183804fcd871d050100053ffe30000,RT.{..RT.W....E..(..@.@...[..\t..z.......8...q.P..S....,[C2] Staged Payload Source (Stages: 2),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59296, \"\"src\"\": \"\"91.213.188.9\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50578, \"\"seq\"\": 4028119044, \"\"ack\"\": 4242043344, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 65507, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 78, \"total_bytes_sent\": 6619, \"total_bytes_received\": 4318, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Raw\"], \"ports_used\": [49899, 49892, 49957, 49956, 49955, 49958, 49954, 50578], \"first_seen\": 1777213576.978934, \"last_seen\": 1777213883.009517, \"packets\": [{\"num\": 28, \"time\": 1777213712.566196, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1777213712.566245, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1777213712.566261, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777213712.581699, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1777213712.581767, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1777213713.784793, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1777213713.784891, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1777213713.853838, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 36, \"time\": 1777213713.853919, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 37, \"time\": 1777213713.853936, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 38, \"time\": 1777213716.284163, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 39, \"time\": 1777213716.28422, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 40, \"time\": 1777213716.362379, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 41, \"time\": 1777213716.362465, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 42, \"time\": 1777213716.362483, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 43, \"time\": 1777213721.085381, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 44, \"time\": 1777213721.085449, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1777213721.163498, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 46, \"time\": 1777213721.163578, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 47, \"time\": 1777213721.163595, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 48, \"time\": 1777213730.778945, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 49, \"time\": 1777213730.779057, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 50, \"time\": 1777213730.857066, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 51, \"time\": 1777213730.857168, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 52, \"time\": 1777213730.857188, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 53, \"time\": 1777213870.011506, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 54, \"time\": 1777213870.011559, \"size\": 66, \"direction\": \"received\"}, {\"num\": 55, \"time\": 1777213870.0117, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 56, \"time\": 1777213880.775338, \"size\": 374, \"direction\": \"received\"}, {\"num\": 57, \"time\": 1777213880.775728, \"size\": 64, \"direction\": \"sent\"}, {\"num\": 58, \"time\": 1777213880.775759, \"size\": 54, \"direction\": \"received\"}, {\"num\": 59, \"time\": 1777213881.206814, \"size\": 72, \"direction\": \"received\"}, {\"num\": 60, \"time\": 1777213881.220781, \"size\": 231, \"direction\": \"sent\"}, {\"num\": 61, \"time\": 1777213881.220806, \"size\": 54, \"direction\": \"received\"}, {\"num\": 62, \"time\": 1777213881.619811, \"size\": 3061, \"direction\": \"received\"}, {\"num\": 63, \"time\": 1777213881.620002, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 64, \"time\": 1777213881.660193, \"size\": 147, \"direction\": \"sent\"}, {\"num\": 65, \"time\": 1777213881.660223, \"size\": 54, \"direction\": \"received\"}, {\"num\": 66, \"time\": 1777213882.043482, \"size\": 105, \"direction\": \"received\"}, {\"num\": 67, \"time\": 1777213882.099332, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 68, \"time\": 1777213882.174321, \"size\": 108, \"direction\": \"sent\"}, {\"num\": 69, \"time\": 1777213882.174345, \"size\": 54, \"direction\": \"received\"}, {\"num\": 70, \"time\": 1777213882.551505, \"size\": 134, \"direction\": \"received\"}, {\"num\": 71, \"time\": 1777213882.551986, \"size\": 103, \"direction\": \"sent\"}, {\"num\": 72, \"time\": 1777213882.552008, \"size\": 54, \"direction\": \"received\"}, {\"num\": 73, \"time\": 1777213882.99833, \"size\": 128, \"direction\": \"received\"}, {\"num\": 74, \"time\": 1777213882.99836, \"size\": 54, \"direction\": \"received\"}, {\"num\": 75, \"time\": 1777213882.998523, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 76, \"time\": 1777213883.009485, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 77, \"time\": 1777213883.009517, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 306.0305829048157, \"avg_packet_size\": 140.21794871794873, \"packets_per_second\": 0.25487648737466295}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3740, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777213576.978934, \"last_seen\": 1777213600.806974, \"packets\": [{\"num\": 0, \"time\": 1777213576.978934, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777213577.29147, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777213577.900813, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777213579.103914, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777213579.459364, \"size\": 301, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777213579.760137, \"size\": 301, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777213580.317697, \"size\": 153, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777213580.364609, \"size\": 301, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777213581.520764, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777213581.567614, \"size\": 301, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777213582.770657, \"size\": 301, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777213583.926862, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777213583.973748, \"size\": 301, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777213586.386448, \"size\": 301, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777213588.800596, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777213591.207642, \"size\": 301, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777213598.415325, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777213600.806974, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 23.82803988456726, \"avg_packet_size\": 207.77777777777777, \"packets_per_second\": 0.7554125344425869}, {\"id\": \"13.107.42.254\", \"ip\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.537736, \"last_seen\": 1777213730.778945, \"packets\": [{\"num\": 18, \"time\": 1777213711.537736, \"size\": 54, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1777213711.886229, \"size\": 54, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1777213712.581699, \"size\": 54, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1777213713.784793, \"size\": 54, \"direction\": \"received\"}, {\"num\": 38, \"time\": 1777213716.284163, \"size\": 54, \"direction\": \"received\"}, {\"num\": 43, \"time\": 1777213721.085381, \"size\": 54, \"direction\": \"received\"}, {\"num\": 48, \"time\": 1777213730.778945, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.42.0/24\"}, \"duration\": 19.241209030151367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36380250269257286}, {\"id\": \"131.253.33.254\", \"ip\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.537938, \"last_seen\": 1777213730.857066, \"packets\": [{\"num\": 19, \"time\": 1777213711.537938, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777213711.964322, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777213712.566196, \"size\": 54, \"direction\": \"received\"}, {\"num\": 35, \"time\": 1777213713.853838, \"size\": 54, \"direction\": \"received\"}, {\"num\": 40, \"time\": 1777213716.362379, \"size\": 54, \"direction\": \"received\"}, {\"num\": 45, \"time\": 1777213721.163498, \"size\": 54, \"direction\": \"received\"}, {\"num\": 50, \"time\": 1777213730.857066, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"131.253.33.224/27\"}, \"duration\": 19.319127798080444, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3623351982119774}, {\"id\": \"13.107.3.254\", \"ip\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.538179, \"last_seen\": 1777213730.779057, \"packets\": [{\"num\": 20, \"time\": 1777213711.538179, \"size\": 54, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777213711.886259, \"size\": 54, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1777213712.581767, \"size\": 54, \"direction\": \"received\"}, {\"num\": 34, \"time\": 1777213713.784891, \"size\": 54, \"direction\": \"received\"}, {\"num\": 39, \"time\": 1777213716.28422, \"size\": 54, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1777213721.085449, \"size\": 54, \"direction\": \"received\"}, {\"num\": 49, \"time\": 1777213730.779057, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.0.0/22\"}, \"duration\": 19.240878105163574, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3638087597530929}, {\"id\": \"204.79.197.222\", \"ip\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.540809, \"last_seen\": 1777213730.857168, \"packets\": [{\"num\": 21, \"time\": 1777213711.540809, \"size\": 54, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777213711.964448, \"size\": 54, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777213712.566245, \"size\": 54, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1777213713.853919, \"size\": 54, \"direction\": \"received\"}, {\"num\": 41, \"time\": 1777213716.362465, \"size\": 54, \"direction\": \"received\"}, {\"num\": 46, \"time\": 1777213721.163578, \"size\": 54, \"direction\": \"received\"}, {\"num\": 51, \"time\": 1777213730.857168, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"204.79.196.0/23\"}, \"duration\": 19.316359043121338, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238713436488634}, {\"id\": \"23.48.245.217\", \"ip\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777213711.540862, \"last_seen\": 1777213730.857188, \"packets\": [{\"num\": 22, \"time\": 1777213711.540862, \"size\": 54, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1777213711.964472, \"size\": 54, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777213712.566261, \"size\": 54, \"direction\": \"received\"}, {\"num\": 37, \"time\": 1777213713.853936, \"size\": 54, \"direction\": \"received\"}, {\"num\": 42, \"time\": 1777213716.362483, \"size\": 54, \"direction\": \"received\"}, {\"num\": 47, \"time\": 1777213721.163595, \"size\": 54, \"direction\": \"received\"}, {\"num\": 52, \"time\": 1777213730.857188, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"New Delhi\", \"lat\": 28.6327, \"lon\": 77.2198, \"asn\": 9498, \"isp\": \"BHARTI Airtel Ltd.\", \"network\": \"23.48.245.0/24\"}, \"duration\": 19.316325902938843, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238775609677404}, {\"id\": \"91.213.188.9\", \"ip\": \"91.213.188.9\", \"packet_count\": 25, \"total_bytes_sent\": 4318, \"total_bytes_received\": 989, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [21], \"first_seen\": 1777213870.011506, \"last_seen\": 1777213883.009517, \"packets\": [{\"num\": 53, \"time\": 1777213870.011506, \"size\": 66, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1777213870.011559, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 55, \"time\": 1777213870.0117, \"size\": 54, \"direction\": \"received\"}, {\"num\": 56, \"time\": 1777213880.775338, \"size\": 374, \"direction\": \"sent\"}, {\"num\": 57, \"time\": 1777213880.775728, \"size\": 64, \"direction\": \"received\"}, {\"num\": 58, \"time\": 1777213880.775759, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 59, \"time\": 1777213881.206814, \"size\": 72, \"direction\": \"sent\"}, {\"num\": 60, \"time\": 1777213881.220781, \"size\": 231, \"direction\": \"received\"}, {\"num\": 61, \"time\": 1777213881.220806, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 62, \"time\": 1777213881.619811, \"size\": 3061, \"direction\": \"sent\"}, {\"num\": 63, \"time\": 1777213881.620002, \"size\": 54, \"direction\": \"received\"}, {\"num\": 64, \"time\": 1777213881.660193, \"size\": 147, \"direction\": \"received\"}, {\"num\": 65, \"time\": 1777213881.660223, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 66, \"time\": 1777213882.043482, \"size\": 105, \"direction\": \"sent\"}, {\"num\": 67, \"time\": 1777213882.099332, \"size\": 54, \"direction\": \"received\"}, {\"num\": 68, \"time\": 1777213882.174321, \"size\": 108, \"direction\": \"received\"}, {\"num\": 69, \"time\": 1777213882.174345, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 70, \"time\": 1777213882.551505, \"size\": 134, \"direction\": \"sent\"}, {\"num\": 71, \"time\": 1777213882.551986, \"size\": 103, \"direction\": \"received\"}, {\"num\": 72, \"time\": 1777213882.552008, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 73, \"time\": 1777213882.99833, \"size\": 128, \"direction\": \"sent\"}, {\"num\": 74, \"time\": 1777213882.99836, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 75, \"time\": 1777213882.998523, \"size\": 54, \"direction\": \"received\"}, {\"num\": 76, \"time\": 1777213883.009485, \"size\": 54, \"direction\": \"received\"}, {\"num\": 77, \"time\": 1777213883.009517, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Romania\", \"city\": \"Unknown\", \"lat\": 45.9968, \"lon\": 24.997, \"asn\": 49468, \"isp\": \"Magit'st Srl\", \"network\": \"91.213.188.0/24\"}, \"duration\": 12.998010873794556, \"avg_packet_size\": 212.28, \"packets_per_second\": 1.923371217545509}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3740, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777213576.978934, \"last_packet\": 1777213600.806974, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777213576.978934, \"timestamp_iso\": \"2026-04-26T19:56:16.978934\", \"timestamp_human\": \"2026-04-26 19:56:16.978\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777213577.29147, \"timestamp_iso\": \"2026-04-26T19:56:17.291470\", \"timestamp_human\": \"2026-04-26 19:56:17.291\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777213577.900813, \"timestamp_iso\": \"2026-04-26T19:56:17.900813\", \"timestamp_human\": \"2026-04-26 19:56:17.900\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777213579.103914, \"timestamp_iso\": \"2026-04-26T19:56:19.103914\", \"timestamp_human\": \"2026-04-26 19:56:19.103\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777213579.459364, \"timestamp_iso\": \"2026-04-26T19:56:19.459364\", \"timestamp_human\": \"2026-04-26 19:56:19.459\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777213579.760137, \"timestamp_iso\": \"2026-04-26T19:56:19.760137\", \"timestamp_human\": \"2026-04-26 19:56:19.760\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777213580.317697, \"timestamp_iso\": \"2026-04-26T19:56:20.317697\", \"timestamp_human\": \"2026-04-26 19:56:20.317\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777213580.364609, \"timestamp_iso\": \"2026-04-26T19:56:20.364609\", \"timestamp_human\": \"2026-04-26 19:56:20.364\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777213581.520764, \"timestamp_iso\": \"2026-04-26T19:56:21.520764\", \"timestamp_human\": \"2026-04-26 19:56:21.520\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777213581.567614, \"timestamp_iso\": \"2026-04-26T19:56:21.567614\", \"timestamp_human\": \"2026-04-26 19:56:21.567\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 287, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777213582.770657, \"timestamp_iso\": \"2026-04-26T19:56:22.770657\", \"timestamp_human\": \"2026-04-26 19:56:22.770\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 287, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777213583.926862, \"timestamp_iso\": \"2026-04-26T19:56:23.926862\", \"timestamp_human\": \"2026-04-26 19:56:23.926\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777213583.973748, \"timestamp_iso\": \"2026-04-26T19:56:23.973748\", \"timestamp_human\": \"2026-04-26 19:56:23.973\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777213586.386448, \"timestamp_iso\": \"2026-04-26T19:56:26.386448\", \"timestamp_human\": \"2026-04-26 19:56:26.386\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777213588.800596, \"timestamp_iso\": \"2026-04-26T19:56:28.800596\", \"timestamp_human\": \"2026-04-26 19:56:28.800\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777213591.207642, \"timestamp_iso\": \"2026-04-26T19:56:31.207642\", \"timestamp_human\": \"2026-04-26 19:56:31.207\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777213598.415325, \"timestamp_iso\": \"2026-04-26T19:56:38.415325\", \"timestamp_human\": \"2026-04-26 19:56:38.415\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777213600.806974, \"timestamp_iso\": \"2026-04-26T19:56:40.806974\", \"timestamp_human\": \"2026-04-26 19:56:40.806\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411404, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 301, 301, 153, 301, 153, 301, 301, 153, 301, 301, 153, 301, 54, 54], \"inter_packet_intervals\": [0.31253600120544434, 0.6093430519104004, 1.2031009197235107, 0.355449914932251, 0.30077314376831055, 0.5575599670410156, 0.04691195487976074, 1.1561551094055176, 0.046849966049194336, 1.203042984008789, 1.1562049388885498, 0.04688596725463867, 2.4126999378204346, 2.4141480922698975, 2.40704607963562, 7.207682847976685, 2.391649007797241], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 23.82803988456726, \"avg_packet_size\": 207.77777777777777, \"packets_per_second\": 0.7554125344425869, \"bytes_per_second\": 156.95793771195972, \"min_packet_size\": 54, \"max_packet_size\": 301, \"median_packet_size\": 153, \"avg_interval\": 1.4016494049745447, \"min_interval\": 0.046849966049194336, \"max_interval\": 7.207682847976685}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49957], \"dst_ports\": [443], \"first_packet\": 1777213711.537736, \"last_packet\": 1777213730.778945, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777213711.537736, \"timestamp_iso\": \"2026-04-26T19:58:31.537736\", \"timestamp_human\": \"2026-04-26 19:58:31.537\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10777, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 23, \"timestamp\": 1777213711.886229, \"timestamp_iso\": \"2026-04-26T19:58:31.886229\", \"timestamp_human\": \"2026-04-26 19:58:31.886\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10778, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 31, \"timestamp\": 1777213712.581699, \"timestamp_iso\": \"2026-04-26T19:58:32.581699\", \"timestamp_human\": \"2026-04-26 19:58:32.581\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10779, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1777213713.784793, \"timestamp_iso\": \"2026-04-26T19:58:33.784793\", \"timestamp_human\": \"2026-04-26 19:58:33.784\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10780, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 38, \"timestamp\": 1777213716.284163, \"timestamp_iso\": \"2026-04-26T19:58:36.284163\", \"timestamp_human\": \"2026-04-26 19:58:36.284\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10781, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 43, \"timestamp\": 1777213721.085381, \"timestamp_iso\": \"2026-04-26T19:58:41.085381\", \"timestamp_human\": \"2026-04-26 19:58:41.085\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10782, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 48, \"timestamp\": 1777213730.778945, \"timestamp_iso\": \"2026-04-26T19:58:50.778945\", \"timestamp_human\": \"2026-04-26 19:58:50.778\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10783, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378439, \"tcp_ack\": 1765244119, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.3484930992126465, 0.695469856262207, 1.2030940055847168, 2.4993700981140137, 4.801218032836914, 9.69356393814087], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.241209030151367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36380250269257286, \"bytes_per_second\": 19.645335145398935, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.2068681716918945, \"min_interval\": 0.3484930992126465, \"max_interval\": 9.69356393814087}, {\"source\": \"192.168.122.168\", \"target\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49956], \"dst_ports\": [443], \"first_packet\": 1777213711.537938, \"last_packet\": 1777213730.857066, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777213711.537938, \"timestamp_iso\": \"2026-04-26T19:58:31.537938\", \"timestamp_human\": \"2026-04-26 19:58:31.537\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42256, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777213711.964322, \"timestamp_iso\": \"2026-04-26T19:58:31.964322\", \"timestamp_human\": \"2026-04-26 19:58:31.964\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42257, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777213712.566196, \"timestamp_iso\": \"2026-04-26T19:58:32.566196\", \"timestamp_human\": \"2026-04-26 19:58:32.566\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42258, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 35, \"timestamp\": 1777213713.853838, \"timestamp_iso\": \"2026-04-26T19:58:33.853838\", \"timestamp_human\": \"2026-04-26 19:58:33.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42259, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 40, \"timestamp\": 1777213716.362379, \"timestamp_iso\": \"2026-04-26T19:58:36.362379\", \"timestamp_human\": \"2026-04-26 19:58:36.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42260, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 45, \"timestamp\": 1777213721.163498, \"timestamp_iso\": \"2026-04-26T19:58:41.163498\", \"timestamp_human\": \"2026-04-26 19:58:41.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42261, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1777213730.857066, \"timestamp_iso\": \"2026-04-26T19:58:50.857066\", \"timestamp_human\": \"2026-04-26 19:58:50.857\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42262, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739734, \"tcp_ack\": 4241599660, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.42638397216796875, 0.6018738746643066, 1.287642002105713, 2.5085411071777344, 4.801118850708008, 9.693567991256714], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.319127798080444, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3623351982119774, \"bytes_per_second\": 19.56610070344678, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.2198546330134072, \"min_interval\": 0.42638397216796875, \"max_interval\": 9.693567991256714}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49955], \"dst_ports\": [443], \"first_packet\": 1777213711.538179, \"last_packet\": 1777213730.779057, \"packets\": [{\"packet_number\": 20, \"timestamp\": 1777213711.538179, \"timestamp_iso\": \"2026-04-26T19:58:31.538179\", \"timestamp_human\": \"2026-04-26 19:58:31.538\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22826, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777213711.886259, \"timestamp_iso\": \"2026-04-26T19:58:31.886259\", \"timestamp_human\": \"2026-04-26 19:58:31.886\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22827, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777213712.581767, \"timestamp_iso\": \"2026-04-26T19:58:32.581767\", \"timestamp_human\": \"2026-04-26 19:58:32.581\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 34, \"timestamp\": 1777213713.784891, \"timestamp_iso\": \"2026-04-26T19:58:33.784891\", \"timestamp_human\": \"2026-04-26 19:58:33.784\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 39, \"timestamp\": 1777213716.28422, \"timestamp_iso\": \"2026-04-26T19:58:36.284220\", \"timestamp_human\": \"2026-04-26 19:58:36.284\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 44, \"timestamp\": 1777213721.085449, \"timestamp_iso\": \"2026-04-26T19:58:41.085449\", \"timestamp_human\": \"2026-04-26 19:58:41.085\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777213730.779057, \"timestamp_iso\": \"2026-04-26T19:58:50.779057\", \"timestamp_human\": \"2026-04-26 19:58:50.779\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304945, \"tcp_ack\": 1203919404, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.3480801582336426, 0.6955080032348633, 1.2031238079071045, 2.499329090118408, 4.801229000091553, 9.693608045578003], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.240878105163574, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3638087597530929, \"bytes_per_second\": 19.645673026667016, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.206813017527262, \"min_interval\": 0.3480801582336426, \"max_interval\": 9.693608045578003}, {\"source\": \"192.168.122.168\", \"target\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49958], \"dst_ports\": [443], \"first_packet\": 1777213711.540809, \"last_packet\": 1777213730.857168, \"packets\": [{\"packet_number\": 21, \"timestamp\": 1777213711.540809, \"timestamp_iso\": \"2026-04-26T19:58:31.540809\", \"timestamp_human\": \"2026-04-26 19:58:31.540\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 340, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 26, \"timestamp\": 1777213711.964448, \"timestamp_iso\": \"2026-04-26T19:58:31.964448\", \"timestamp_human\": \"2026-04-26 19:58:31.964\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 341, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 29, \"timestamp\": 1777213712.566245, \"timestamp_iso\": \"2026-04-26T19:58:32.566245\", \"timestamp_human\": \"2026-04-26 19:58:32.566\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 342, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 36, \"timestamp\": 1777213713.853919, \"timestamp_iso\": \"2026-04-26T19:58:33.853919\", \"timestamp_human\": \"2026-04-26 19:58:33.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 343, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 41, \"timestamp\": 1777213716.362465, \"timestamp_iso\": \"2026-04-26T19:58:36.362465\", \"timestamp_human\": \"2026-04-26 19:58:36.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 344, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777213721.163578, \"timestamp_iso\": \"2026-04-26T19:58:41.163578\", \"timestamp_human\": \"2026-04-26 19:58:41.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 51, \"timestamp\": 1777213730.857168, \"timestamp_iso\": \"2026-04-26T19:58:50.857168\", \"timestamp_human\": \"2026-04-26 19:58:50.857\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 346, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733384, \"tcp_ack\": 974826609, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.42363905906677246, 0.6017971038818359, 1.2876739501953125, 2.5085458755493164, 4.801113128662109, 9.693589925765991], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.316359043121338, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238713436488634, \"bytes_per_second\": 19.568905255703864, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.219393173853556, \"min_interval\": 0.42363905906677246, \"max_interval\": 9.693589925765991}, {\"source\": \"192.168.122.168\", \"target\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49954], \"dst_ports\": [443], \"first_packet\": 1777213711.540862, \"last_packet\": 1777213730.857188, \"packets\": [{\"packet_number\": 22, \"timestamp\": 1777213711.540862, \"timestamp_iso\": \"2026-04-26T19:58:31.540862\", \"timestamp_human\": \"2026-04-26 19:58:31.540\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777213711.964472, \"timestamp_iso\": \"2026-04-26T19:58:31.964472\", \"timestamp_human\": \"2026-04-26 19:58:31.964\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 30, \"timestamp\": 1777213712.566261, \"timestamp_iso\": \"2026-04-26T19:58:32.566261\", \"timestamp_human\": \"2026-04-26 19:58:32.566\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 37, \"timestamp\": 1777213713.853936, \"timestamp_iso\": \"2026-04-26T19:58:33.853936\", \"timestamp_human\": \"2026-04-26 19:58:33.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 42, \"timestamp\": 1777213716.362483, \"timestamp_iso\": \"2026-04-26T19:58:36.362483\", \"timestamp_human\": \"2026-04-26 19:58:36.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 47, \"timestamp\": 1777213721.163595, \"timestamp_iso\": \"2026-04-26T19:58:41.163595\", \"timestamp_human\": \"2026-04-26 19:58:41.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4833, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 52, \"timestamp\": 1777213730.857188, \"timestamp_iso\": \"2026-04-26T19:58:50.857188\", \"timestamp_human\": \"2026-04-26 19:58:50.857\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4834, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525660, \"tcp_ack\": 1444010957, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.42360997200012207, 0.6017889976501465, 1.287674903869629, 2.508547067642212, 4.801111936569214, 9.69359302520752], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.316325902938843, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.36238775609677404, \"bytes_per_second\": 19.568938829225797, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.219387650489807, \"min_interval\": 0.42360997200012207, \"max_interval\": 9.69359302520752}, {\"source\": \"192.168.122.168\", \"target\": \"91.213.188.9\", \"packet_count\": 11, \"total_bytes\": 989, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [50578], \"dst_ports\": [21], \"first_packet\": 1777213870.011506, \"last_packet\": 1777213883.009485, \"packets\": [{\"packet_number\": 53, \"timestamp\": 1777213870.011506, \"timestamp_iso\": \"2026-04-26T20:01:10.011506\", \"timestamp_human\": \"2026-04-26 20:01:10.011\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56414, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042959, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 55, \"timestamp\": 1777213870.0117, \"timestamp_iso\": \"2026-04-26T20:01:10.011700\", \"timestamp_human\": \"2026-04-26 20:01:10.011\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56415, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042960, \"tcp_ack\": 4028115493, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 57, \"timestamp\": 1777213880.775728, \"timestamp_iso\": \"2026-04-26T20:01:20.775728\", \"timestamp_human\": \"2026-04-26 20:01:20.775\", \"size\": 64, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56416, \"ip_len\": 50, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042960, \"tcp_ack\": 4028115813, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 10, \"payload_preview\": \"4155544820544c530d0a\", \"payload_ascii\": \"AUTH TLS\\r\\n\"}, {\"packet_number\": 60, \"timestamp\": 1777213881.220781, \"timestamp_iso\": \"2026-04-26T20:01:21.220781\", \"timestamp_human\": \"2026-04-26 20:01:21.220\", \"size\": 231, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56417, \"ip_len\": 217, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242042970, \"tcp_ack\": 4028115831, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 177, \"payload_preview\": \"16030300ac010000a8030369d776ed8561b0aa62d9d4331996034bbe4e4cc598bb473af9aaa4039eec9fd800002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a0100005500000014001200000f6674702e68656e66727569742e726f000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100\", \"payload_ascii\": \"\\u0016\\u0003\\u0003\\u0000\\u0001\\u0000\\u0000\\u0003\\u0003ivab3\\u0019\\u0003KNLG:\\u0003\\u0000\\u0000*,+0/\\u0000\\u0000$#('\\n\\t\\u0014\\u0013\\u0000\\u0000\\u0000=\\u0000<\\u00005\\u0000/\\u0000\\n\\u0001\\u0000\\u0000U\\u0000\\u0000\\u0000\\u0014\\u0000\\u0012\\u0000\\u0000\\u000fftp.henfruit.ro\\u0000\\n\\u0000\\b\\u0000\\u0006\\u0000\\u001d\\u0000\\u0017\\u0000\\u0018\\u0000\\u000b\\u0000\\u0002\\u0001\\u0000\\u0000\\r\\u0000\\u001a\\u0000\\u0018\\b\\u0004\\b\\u0005\\b\\u0006\\u0004\\u0001\\u0005\\u0001\\u0002\\u0001\\u0004\\u0003\\u0005\\u0003\\u0002\\u0003\\u0002\\u0002\\u0006\\u0001\\u0006\\u0003\\u0000#\\u0000\\u0000\\u0000\\u0017\\u0000\\u0000\\u0001\\u0000\\u0001\\u0000\"}, {\"packet_number\": 63, \"timestamp\": 1777213881.620002, \"timestamp_iso\": \"2026-04-26T20:01:21.620002\", \"timestamp_human\": \"2026-04-26 20:01:21.620\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56418, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043147, \"tcp_ack\": 4028118838, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 64, \"timestamp\": 1777213881.660193, \"timestamp_iso\": \"2026-04-26T20:01:21.660193\", \"timestamp_human\": \"2026-04-26 20:01:21.660\", \"size\": 147, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56419, \"ip_len\": 133, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043147, \"tcp_ack\": 4028118838, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 93, \"payload_preview\": \"1603030025100000212029299fb24769f840d7c1d6e44c95c36826efdd8164b71a64738ced6dd24e0c1d14030300010116030300280000000000000000aab233e3f23bb240c389cd0b99d959ffaa788ca37d1904396c69cf860278b17d\", \"payload_ascii\": \"\\u0016\\u0003\\u0003\\u0000%\\u0010\\u0000\\u0000! ))Gi@Lh&d\\u001adsmN\\f\\u001d\\u0014\\u0003\\u0003\\u0000\\u0001\\u0001\\u0016\\u0003\\u0003\\u0000(\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u00003;@\\u000bYx}\\u0019\\u00049li\\u0002x}\"}, {\"packet_number\": 67, \"timestamp\": 1777213882.099332, \"timestamp_iso\": \"2026-04-26T20:01:22.099332\", \"timestamp_human\": \"2026-04-26 20:01:22.099\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56420, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043240, \"tcp_ack\": 4028118889, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 68, \"timestamp\": 1777213882.174321, \"timestamp_iso\": \"2026-04-26T20:01:22.174321\", \"timestamp_human\": \"2026-04-26 20:01:22.174\", \"size\": 108, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56421, \"ip_len\": 94, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043240, \"tcp_ack\": 4028118889, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 54, \"payload_preview\": \"170303003100000000000000018264e28fc05a14fa82a0a03a18112e2786e4b3fec343485366b3e5a74e8d280e456e30cfc18ede5a64\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u00001\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0001dZ\\u0014:\\u0018\\u0011.'CHSfN(\\u000eEn0Zd\"}, {\"packet_number\": 71, \"timestamp\": 1777213882.551986, \"timestamp_iso\": \"2026-04-26T20:01:22.551986\", \"timestamp_human\": \"2026-04-26 20:01:22.551\", \"size\": 103, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56422, \"ip_len\": 89, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043294, \"tcp_ack\": 4028118969, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 49, \"payload_preview\": \"170303002c00000000000000024697a11739fd827fa1ddd4e7db2893a2e3643212121344c653a6516f909c23ada799a362\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u0000,\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0002F\\u00179\\u007f(d2\\u0012\\u0012\\u0013DSQo#b\"}, {\"packet_number\": 75, \"timestamp\": 1777213882.998523, \"timestamp_iso\": \"2026-04-26T20:01:22.998523\", \"timestamp_human\": \"2026-04-26 20:01:22.998\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56423, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043343, \"tcp_ack\": 4028119044, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 76, \"timestamp\": 1777213883.009485, \"timestamp_iso\": \"2026-04-26T20:01:23.009485\", \"timestamp_human\": \"2026-04-26 20:01:23.009\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"91.213.188.9\", \"ttl\": 128, \"ip_id\": 56424, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50578, \"dst_port\": 21, \"tcp_seq\": 4242043343, \"tcp_ack\": 4028119044, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 10, \"PSH\": 5, \"FIN\": 1}, \"packet_sizes\": [66, 54, 64, 231, 54, 147, 54, 108, 103, 54, 54], \"inter_packet_intervals\": [0.0001938343048095703, 10.764028072357178, 0.4450531005859375, 0.39922094345092773, 0.040190935134887695, 0.43913912773132324, 0.07498884201049805, 0.37766504287719727, 0.4465370178222656, 0.01096200942993164], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 12.997978925704956, \"avg_packet_size\": 89.9090909090909, \"packets_per_second\": 0.8462854158230916, \"bytes_per_second\": 76.08875238627614, \"min_packet_size\": 54, \"max_packet_size\": 231, \"median_packet_size\": 64, \"avg_interval\": 1.2997978925704956, \"min_interval\": 0.0001938343048095703, \"max_interval\": 10.764028072357178}, {\"source\": \"91.213.188.9\", \"target\": \"192.168.122.168\", \"packet_count\": 14, \"total_bytes\": 4318, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [21], \"dst_ports\": [50578], \"first_packet\": 1777213870.011559, \"last_packet\": 1777213883.009517, \"packets\": [{\"packet_number\": 54, \"timestamp\": 1777213870.011559, \"timestamp_iso\": \"2026-04-26T20:01:10.011559\", \"timestamp_human\": \"2026-04-26 20:01:10.011\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115492, \"tcp_ack\": 4242042960, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 56, \"timestamp\": 1777213880.775338, \"timestamp_iso\": \"2026-04-26T20:01:20.775338\", \"timestamp_human\": \"2026-04-26 20:01:20.775\", \"size\": 374, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37367, \"ip_len\": 360, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115493, \"tcp_ack\": 4242042960, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 320, \"payload_preview\": \"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\", \"payload_ascii\": \"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 17:31. Server port: 21.\\r\\n220-This is a private system - No anonymous login\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"}, {\"packet_number\": 58, \"timestamp\": 1777213880.775759, \"timestamp_iso\": \"2026-04-26T20:01:20.775759\", \"timestamp_human\": \"2026-04-26 20:01:20.775\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37368, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115813, \"tcp_ack\": 4242042970, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 59, \"timestamp\": 1777213881.206814, \"timestamp_iso\": \"2026-04-26T20:01:21.206814\", \"timestamp_human\": \"2026-04-26 20:01:21.206\", \"size\": 72, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37369, \"ip_len\": 58, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115813, \"tcp_ack\": 4242042970, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 18, \"payload_preview\": \"323334204155544820544c53204f4b2e0d0a\", \"payload_ascii\": \"234 AUTH TLS OK.\\r\\n\"}, {\"packet_number\": 61, \"timestamp\": 1777213881.220806, \"timestamp_iso\": \"2026-04-26T20:01:21.220806\", \"timestamp_human\": \"2026-04-26 20:01:21.220\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37370, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115831, \"tcp_ack\": 4242043147, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 62, \"timestamp\": 1777213881.619811, \"timestamp_iso\": \"2026-04-26T20:01:21.619811\", \"timestamp_human\": \"2026-04-26 20:01:21.619\", \"size\": 3061, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37371, \"ip_len\": 3047, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028115831, \"tcp_ack\": 4242043147, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3007, \"payload_preview\": \"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\", \"payload_ascii\": \"\\u0016\\u0003\\u0003\\u0000a\\u0002\\u0000\\u0000]\\u0003\\u0003\\\\3\\u0013r\\u001dqA\\u007fx>M=\\u000f\\u0012DOWNGRD\\u0001 P#DxH;aU=\\u000feq0\\u0000\\u0000\\u0015\\u0001\\u0000\\u0001\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u000b\\u0000\\u0004\\u0003\\u0000\\u0001\\u0002\\u0000\\u0017\\u0000\\u0000\\u0016\\u0003\\u0003\\n\\u001a\\u000b\\u0000\\n\\u0016\\u0000\\n\\u0013\\u0000\\u0005\\u00040\\u0005\\u00000\\u0003\\u0003\\u0002\\u0001\\u0002\\u0002\\u0012\\u0005?Yd\\u001djxdt0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000031\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00160\\u0014\\u0006\\u0003U\\u0004\\n\\u0013\\rLet's Encrypt1\\f0\\n\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0003R130\\u001e\\u0017\\r260331071445Z\\u0017\\r260629071444Z0\\u001e1\\u001c0\\u001a\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0013mgh-web9.maghost.ro0\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000U{W\\n`P\\u0004\\u00110\\bEpM\\\\)GL\\b+G\\u000e\\u001av}z{2ZGL0W\\u001dxl*|uBK!!dS\\u0018PAerBfP\\u0000l. q\\u0015S^\\u0019r_YZM&\\u000bKo\\u0012|7xNUh1D\\u001aDd\\u0006B'_.'+gYI4HDhPnCq\\u0014j%\\u0007\\nh\\u0010h)1Obq$=^Y\\u0013\\b7\\u0016#X+.z@\\u0006QN\\u0004]\\u0002\\u0003\\u0001\\u0000\\u0001\\u0002!0\\u0002\\u001d0\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00050\\u0013\\u0006\\u0003U\\u001d%\\u0004\\f0\\n\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00020\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014>*s9#Rf\\u000bm@t\\u00060\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014\\u000f,3S^Ox\\u000e;303\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004'0%0#\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002\\u0017http://r13.i.lencr.org/0\\u001e\\u0006\\u0003U\\u001d\\u0011\\u0004\\u00170\\u0015\\u0013mgh-web9.maghost.ro0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010/\\u0006\\u0003U\\u001d\\u001f\\u0004(0&0$\\\" \\u001ehttp://r13.c.lencr.org/106.crl0\\u0001\\u000b\\u0006\\n+\\u0006\\u0001\\u0004\\u0001y\\u0002\\u0004\\u0002\\u0004\\u0004\\u0000\\u0000}\\u0000q~8mI=1Zb\\bv-B\\u0000\\u0005\\fga\\u0000\\u0000\\u0001B;\\u0000\\b\\u0000\\u0000\\u0005\\u0000\\r\\u0011y\\u0004\\u0003\\u0000F0D\\u0002 GR|5%`'m\\u00123}\\u00016e&\\u0002 \\u001d(f\\u000eFk\\u001dgef\\\"ZY.S\\u0002\\u0000v\\u0000nh\\u0007~f5?7\\u0003<A\\u0012\\u0014\\u00181#\\u0004\\u0000\\u0000\\u0001B<.\\u0000\\u0000\\u0004\\u0003\\u0000G0E\\u0002 \\u001a\\u001c\\u0010\\tw\\u0007\\u0014L(pa\\u0018va@f~\\u0016\\u0001=\\u0002!\\u0000O\\tL[&*.a4k\\u001bLS0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000[V\\bbxAd5>{\\t|\\u001cdY g[4|r\\b3A\\f8Rk$mAn64\\u0012x(\\u001d%<lWH\\u000b\\u007fP\\u001aT_c(\\u0011\\u001c\\u001b(3_T\\u000bw:;\\u001f\\u0010S\\u0019i4Zj\\u007f502\\u000f% yfSAm\\u0018\\u0016_ '\\r^#4]t)\\u0001C\\u001cG!.!\\u0010\\u0000jURz\\u00034Ev\\u0019|\\u007f\\r@\\u000b4U\\u0016B9&_7\\u00154\\u001fsb\\u00054+P\\u0006\\u0000\\u0005\\t0\\u0005\\u00050\\u0002\\u0003\\u0002\\u0001\\u0002\\u0002\\u0010Z\\u0000\\u0012AW)\\u00050\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u00000O1\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1)0'\\u0006\\u0003U\\u0004\\n\\u0013 Internet Security Research Group1\\u00150\\u0013\\u0006\\u0003U\\u0004\\u0003\\u0013\\fISRG Root X10\\u001e\\u0017\\r240313000000Z\\u0017\\r270312235959Z031\\u000b0\\t\\u0006\\u0003U\\u0004\\u0006\\u0013\\u0002US1\\u00160\\u0014\\u0006\\u0003U\\u0004\\n\\u0013\\rLet's Encrypt1\\f0\\n\\u0006\\u0003U\\u0004\\u0003\\u0013\\u0003R130\\u0001\\\"0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u0001\\u0005\\u0000\\u0003\\u0001\\u000f\\u00000\\u0001\\n\\u0002\\u0001\\u0001\\u0000gpVd\\u0015\\u0017a\\u0006\\u0019&P7\\u0016cT\\u0005\\b\\u001b`QCH}+H-';W\\u000e\\u000e0o2>XN5oEXhq\\u0017>]/Ql\\u001a]Y5e\\u00107]I\\u00174+q,\\f\\u001d\\u0005^|\\u0001\\u0003\\n]{vBpM\\\"\\u0000wo_\\u0017u.W\\f\\\\shtu~\\u0010\\u00018\\nDI5\\n4\\u001cGN\\u000e\\n6GO)\\u0004u\\\\^CJ\\u0017\\u0005\\u0001\\u000402\\u0002\\u0003\\u0001\\u0000\\u000100\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u00010\\u001d\\u0006\\u0003U\\u001d%\\u0004\\u00160\\u0014\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u0002\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0003\\u00010\\u0012\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\b0\\u0006\\u0001\\u0001\\u0002\\u0001\\u00000\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014\\u000f,3S^Ox\\u000e;30\\u001f\\u0006\\u0003U\\u001d#\\u0004\\u00180\\u0016\\u0014yY{\\u0001s\\b\\u001aXn02\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u0007\\u0001\\u0001\\u0004&0$0\\\"\\u0006\\b+\\u0006\\u0001\\u0005\\u0005\\u00070\\u0002\\u0016http://x1.i.lencr.org/0\\u0013\\u0006\\u0003U\\u001d \\u0004\\f0\\n0\\b\\u0006\\u0006g\\f\\u0001\\u0002\\u00010'\\u0006\\u0003U\\u001d\\u001f\\u0004 0\\u001e0\\u001c\\u001a\\u0018\\u0016http://x1.c.lencr.org/0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0002\\u0001\\u0000Q7XR\\\"5M\\tT\\u0018\\u007f;pre }\\bCr/^#|\\u000fz\\roq\\u0014\\\"\\u0001u\\\\W*\\u001fpMp?k7hEL'd~Z@(;\\\\\\u0004nm\\u000b8Yn/4\\f\\u0010\\u0010+\\u0000z~\\u0004ar|4\\\"0P\\\"d\\n\\u0004\\u0010\\u0007C\\\"\\u0015m2\\u0002%\\u0002\\u001a,o\\u000e4Ie\\u0007\\u001bpZ\\b\\t[5\\u0018,Jul^hD*U;A+oh\\\\[~\\u0018\\tQ^Zh\\u0019\\u007f5Zk-}LcS^XiS$}s\\u001dd|\\bdlo*\\u0003\\u001b\\tDi+Pqu%^IZ\\u000b8FriqTA_U\\u00006H=\\u0011#--+gbDCKH]pmEx[7[\\u0018U\\u0018E[V+\\t-\\nPw--g!*Y%4\\u001daJGVn|!w\\u001d\\u0016\\u0003\\u0003\\u0001,\\f\\u0000\\u0001(\\u0003\\u0000\\u001d qP\\u0003OlG(}\\\\w\\\"Bd\\u001diX|DTJ\\b\\u0004\\u0001\\u0000&B)\\u0006SaK\\u0015ovTN[*1<O\\\"S3x\\u0006N@r&4Ldw\\u0013dS>\\u00012zv\\f,\\u0006u5\\u0010B{\\u000b f\\u0004\\u0018.[>kg{{R\\u0007gQQ\\u001crC+\\u001da\\\"o\\u0014;=szI\\u0018v\\tul\\u000bD<F$&>\\u0001\\u001b8&Eg'N\\u0014t\\u0000<\\rj D\\u001e\\u0003\\u0011\\u0016i\\u001e:o#/Ty.J?\\u0018\\nu\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 65, \"timestamp\": 1777213881.660223, \"timestamp_iso\": \"2026-04-26T20:01:21.660223\", \"timestamp_human\": \"2026-04-26 20:01:21.660\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37374, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118838, \"tcp_ack\": 4242043240, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 66, \"timestamp\": 1777213882.043482, \"timestamp_iso\": \"2026-04-26T20:01:22.043482\", \"timestamp_human\": \"2026-04-26 20:01:22.043\", \"size\": 105, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37375, \"ip_len\": 91, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118838, \"tcp_ack\": 4242043240, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 51, \"payload_preview\": \"1403030001011603030028e006c7a13676422a4e4cd16f04ff413b60801e76351b9d130db34970a953918fe57ed120bd8d4cb1\", \"payload_ascii\": \"\\u0014\\u0003\\u0003\\u0000\\u0001\\u0001\\u0016\\u0003\\u0003\\u0000(\\u00066vB*NLo\\u0004A;`\\u001ev5\\u001b\\u0013\\rIpS~ L\"}, {\"packet_number\": 69, \"timestamp\": 1777213882.174345, \"timestamp_iso\": \"2026-04-26T20:01:22.174345\", \"timestamp_human\": \"2026-04-26 20:01:22.174\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37376, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118889, \"tcp_ack\": 4242043294, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 70, \"timestamp\": 1777213882.551505, \"timestamp_iso\": \"2026-04-26T20:01:22.551505\", \"timestamp_human\": \"2026-04-26 20:01:22.551\", \"size\": 134, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37377, \"ip_len\": 120, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118889, \"tcp_ack\": 4242043294, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 80, \"payload_preview\": \"170303004be006c7a13676422b4f695ff1e0520dcf87c65033ea69e0c7e73dd153305f40a05d6c07ad13a076faf11a03a6b5fe5ed8eadc834c520b64eb4d961a90d53e62935d50dec12889f78d6dd3dd\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u0000K\\u00066vB+Oi_R\\rP3i=S0_@]l\\u0007\\u0013v\\u001a\\u0003^LR\\u000bdM\\u001a>b]P(m\"}, {\"packet_number\": 72, \"timestamp\": 1777213882.552008, \"timestamp_iso\": \"2026-04-26T20:01:22.552008\", \"timestamp_human\": \"2026-04-26 20:01:22.552\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37378, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118969, \"tcp_ack\": 4242043343, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 73, \"timestamp\": 1777213882.99833, \"timestamp_iso\": \"2026-04-26T20:01:22.998330\", \"timestamp_human\": \"2026-04-26 20:01:22.998\", \"size\": 128, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37379, \"ip_len\": 114, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028118969, \"tcp_ack\": 4242043343, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 74, \"payload_preview\": \"1703030045e006c7a13676422c299b62fd76da848aaf62324a7b63639575433cdf5e3ab18c05b6bf05546d3babb23741e709e250d64875a3a589bb4aa31c49c348c1cf14fd717e8223c8\", \"payload_ascii\": \"\\u0017\\u0003\\u0003\\u0000E\\u00066vB,)bvb2J{ccuC<^:\\u0005\\u0005Tm;7A\\tPHuJ\\u001cIH\\u0014q~#\"}, {\"packet_number\": 74, \"timestamp\": 1777213882.99836, \"timestamp_iso\": \"2026-04-26T20:01:22.998360\", \"timestamp_human\": \"2026-04-26 20:01:22.998\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 37380, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028119043, \"tcp_ack\": 4242043343, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1777213883.009517, \"timestamp_iso\": \"2026-04-26T20:01:23.009517\", \"timestamp_human\": \"2026-04-26 20:01:23.009\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"91.213.188.9\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50578, \"tcp_seq\": 4028119044, \"tcp_ack\": 4242043344, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 14, \"PSH\": 6, \"FIN\": 1}, \"packet_sizes\": [66, 374, 54, 72, 54, 3061, 54, 105, 54, 134, 54, 128, 54, 54], \"inter_packet_intervals\": [10.763778924942017, 0.0004210472106933594, 0.43105506896972656, 0.013991832733154297, 0.3990051746368408, 0.040411949157714844, 0.3832590579986572, 0.13086295127868652, 0.37716007232666016, 0.0005028247833251953, 0.4463222026824951, 2.9802322387695312e-05, 0.011157035827636719], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 12.997957944869995, \"avg_packet_size\": 308.42857142857144, \"packets_per_second\": 1.0770922678300778, \"bytes_per_second\": 332.2060294635911, \"min_packet_size\": 54, \"max_packet_size\": 3061, \"median_packet_size\": 66, \"avg_interval\": 0.9998429188361535, \"min_interval\": 2.9802322387695312e-05, \"max_interval\": 10.763778924942017}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69edd82659a6632dae07de35"},"sha256":"2aa5ce3561dc657a157460383c7c9b8db54ac8a6969627009c8d1062316a6130","timestamp":{"$date":"2026-04-29T19:32:32.448Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\nwww.vianware.com,200.58.112.73,HTTP Host,0/70,Neutral,No,External\nhttp://www.vianware.com,200.58.112.73,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_c6cem_9s.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #5\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I...p...F`.E\n######\nT 192.168.122.168:50146 -> 200.58.112.73:80 [AP] #22\nGET /52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA= HTTP/1.1.\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8.\nAccept-Language: en-us.\nHost: www.vianware.com.\nConnection: close.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E).\n.\"\n0.0,NGrep,##,\"Payload: T 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #24\nHTTP/1.1 200 OK.\nServer: openresty/1.27.1.1.\nDate: Tue, 28 Apr 2026 08:17:09 GMT.\nContent-Length: 12147.\nConnection: close.\nContent-Type: text/html.\nCache-Control: private, no-cache, no-store, must-revalidate, max-age=0.\ncf-edge-cache: no-cache.\n.\n<!DOCTYPE html>\n<html lang=\"\"en\"\">\n<head>\n  <meta charset=\"\"utf8\"\">\n  <meta name=\"\"viewport\"\" content=\"\"width=device-width,initial-scale=1.0\"\">\n  <script>\n      (function(){\n          setTimeout(function(){\n              window.location.reload();\n          }, 5000);\n      }())\n  </script>\n  <link rel=\"\"icon\"\" href=\"\"data:,\"\">\n  <title>One moment, please...</title>\n  <style>\n.spinner {\n    -webkit-animation: spin 1s ease-out;\n    animation: spin 1s ease-out;\n}\n@keyframes spin {\n    0% {\n        -webkit-transform: rotate(0deg);\n        -moz-transform: rotate(0deg);\n        -ms-transform: rotate(0deg);\n        -o-transform: rotate(0deg);\n        transform: rotate(0deg);\n    }\n    100% {\n        -webkit-transform: rotate(360deg);\n        -moz-transform: rotate(360deg);\n        -ms-transform: rotate(360deg);\n        -o-transform: rotate(360deg);\n        transform: rotate(360deg);\n    }\n}\n#outer-container {\n    text-align: center;\n}\n#container {\n        display: inline-block;\n        height: 100px;\n    }\n#text {\n    float: left;\n    height: 100px;\n    line-height: 100px;\n    font-size: 3rem;\n    font-family: \"\"Montserrat\"\", sans-serif;\n    font-optical-sizing: auto;\n    font-weight: 400;\n    font-style: normal;\n    padding: 0 .4em 0 .2em;\n    letter-spacing: 0.06em;\n    color: rgba(38, 122, 72, 0.86);\n}\n@media (min-height: 180px) {\n    #outer-container {\n        margin-top: 0;\n    }\n}\n@media (min-height: 360px) {\n    #outer-container {\n        margin-top: 5%;\n    }\n}\n@media (min-height: 540px) {\n    #outer-container {\n        margin-top: 10%;\n    }\n}\n@media (min-height: 720px) {\n    #outer-container {\n        margin-top: 20%;\n    }\n}\n@media (min-width: 1450px) {\n    .throbber {\n        width: 90px;\n        height: 90px;\n        float: left;\n        padding: 5px 0 5px 5px;\n        opacity: 0.86;\n    }\n    #container {\n        display: inline-block;\n        border: 3px solid rgb(38, 122, 72, 0.86);\n        border-radius: 51px;\n        height: 100px;\n    }\n}\"\n0.0,NGrep,</style>,\"Payload: </head>\n<body>\n  <div id=\"\"outer-container\"\">\n    <div id=\"\"container\"\">\n<div class=\"\"throbber\"\">\n    <svg class=\"\"spinner\"\" width=\"\"90px\"\" height=\"\"90px\"\" viewBox=\"\"0 0 47 47\"\"\n         version=\"\"1.1\"\"\n         xmlns=\"\"http://www.w3.org/2000/svg\"\"\n         xmlns:xlink=\"\"http://www.w3.org/1999/xlink\"\">\n        <title>Loader</title>\n        <defs>\n            <polygon id=\"\"path-1\"\"\n                     points=\"\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\"\"></polygon>\n        </defs>\n        <g id=\"\"Page-1\"\" stroke=\"\"none\"\" stroke-width=\"\"1\"\" fill=\"\"none\"\"\n           fill-rule=\"\"evenodd\"\">\n            <g id=\"\"Logo\"\" transform=\"\"translate(-5.000000, -2.000000)\"\">\n                <g id=\"\"Group-2\"\" transform=\"\"translate(5.000000, 2.000000)\"\">\n                    <path d=\"\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\"\"\n                          id\n##\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #26\n=\"\"Fill-1\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\"\"\n                          id=\"\"Fill-3\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\"\"\n                          id=\"\"Fill-5\"\" fill=\"\"#467C45\"\"></path>\n                    <g id=\"\"Group-9\"\"\n                       transform=\"\"translate(0.000000, 11.919659)\"\">\n                        <mask id=\"\"mask-2\"\" fill=\"\"white\"\">\n                            <use xlink:href=\"\"#path-1\"\"></use>\n                        </mask>\n                        <g id=\"\"Clip-8\"\"></g>\n                        <path d=\"\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\"\"\n                              id=\"\"Fill-7\"\" fill=\"\"#467C45\"\"\n                              mask=\"\"url(#mask-2)\"\"></path>\n                    </g>\n                    <path d=\"\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\"\"\n                          id=\"\"Fill-10\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\"\"\n                          id=\"\"Fill-12\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\"\"\n                          id=\"\"Fill-14\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\"\"\n                          id=\"\"Fill-16\"\" fill=\"\"#467C45\"\"></path>\n                </g>\n            </g>\n        </g>\n    </svg>\n</div>\n      <div id=\"\"text\"\">\n        Please wait while your request is being verified...\n      </div>\n    </div>\n  </div>\n  <div id=\"\"y7lixqx7d6cd\"\"></div>\n  <script>\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\n#\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #27\n*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\n##\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AP] #29\n][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\n#\nT 200.58.112.73:80 -> 192.168.122.168:50146 [A] #30\n68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\n#\nT 200.58.112.73:80 -> 192.168.122.168:50146 [AFP] #31\nC,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\n  </script>\n</body>\n</html>\"\n0.0,NGrep,###exit,Payload: \n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpshtww47t/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpshtww47t/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpshtww47t/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpshtww47t/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpshtww47t/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpshtww47t/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpshtww47t/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpshtww47t/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: fwA=,Path: /tmp/tmpshtww47t/tshark/objects/fwA=\n1777364229.232482,Forensics,File Carved: html,\"Path: /tmp/tmpshtww47t/carved_files/carved_192.168.122.168:50146-200.58.112.73:80_bwd_0.html, Stream: 192.168.122.168:50146-200.58.112.73:80_bwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T19:32:30.154199,192.168.122.168:50146->200.58.112.73:80,192.168.122.168,50146,200.58.112.73,80,HTTP,carved_192.168.122.168:50146-200.58.112.73:80_bwd_0.html,html,/tmp/tmpshtww47t/carved_files/carved_192.168.122.168:50146-200.58.112.73:80_bwd_0.html,12147,149c5dde8418c347967a4ce6699dfe6c,c70c98b84d3f72c5b5c68433f3168d17f73de7876acb72cc09f5c2abb1611f05,5.59,\"DOCTYPE html>, <html lang, <head>,   <meta charset, utf8,   <meta name, viewport,  content, width, device-width,initial-scale,   <script>,       (function(),           setTimeout(function(),               window.location.reload(),           , , 5000),       ,   </script>,   <link rel, icon,  href, data:,,   <title>One moment, please...</title>,   <style>, .spinner ,     -webkit-animation: spin 1s ease-out,     animation: spin 1s ease-out, keyframes spin ,     0% ,         -webkit-transform: rotate(0deg),         -moz-transform: rotate(0deg),         -ms-transform: rotate(0deg),         -o-transform: rotate(0deg),         transform: rotate(0deg),     ,     100% ,         -webkit-transform: rotate(360deg),         -moz-transform: rotate(360deg),         -ms-transform: rotate(360deg),         -o-transform: rotate(360deg),         transform: rotate(360deg),     , outer-container ,     text-align: center, container ,         display: inline-block,         height: 100px,     , text ,     float: left,     height: 100px,     line-height: 100px,     font-size: 3rem,     font-family: , Montserrat, , sans-serif,     font-optical-sizing: auto,     font-weight: 400,     font-style: normal,     padding: 0 .4em 0 .2em,     letter-spacing: 0.06em,     color: rgba(38, 122, 72, 0.86), media (min-height: 180px) ,     , outer-container ,         margin-top: 0,     , media (min-height: 360px) ,     , outer-container ,         margin-top: 5%,     , media (min-height: 540px) ,     , outer-container ,         margin-top: 10%,     , media (min-height: 720px) ,     , outer-container ,         margin-top: 20%,     , media (min-width: 1450px) ,     .throbber ,         width: 90px,         height: 90px,         float: left,         padding: 5px 0 5px 5px,         opacity: 0.86,     ,     , container ,         display: inline-block,         border: 3px solid rgb(38, 122, 72, 0.86),         border-radius: 51px,         height: 100px,     ,   </style>, </head>, <body>,   <div id, outer-container,     <div id, container, <div class, throbber,     <svg class, spinner,  width, 90px,  height, 90px,  viewBox, 0 0 47 47,          version,          xmlns, http://www.w3.org/2000/svg,          xmlns:xlink, http://www.w3.org/1999/xlink,         <title>Loader</title>,         <defs>,             <polygon id, path-1,                      points, 0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146, ></polygon>,         </defs>,         <g id, Page-1,  stroke, none,  stroke-width,  fill, none,            fill-rule, evenodd,             <g id, Logo,  transform, translate(-5.000000, -2.000000),                 <g id, Group-2,  transform, translate(5.000000, 2.000000),                     <path d, M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z,                           id, Fill-1,  fill, 467C45, ></path>,                     <path d, M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585,                           id, Fill-3,  fill, 467C45, ></path>,                     <path d, M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049,                           id, Fill-5,  fill, 467C45, ></path>,                     <g id, Group-9,                        transform, translate(0.000000, 11.919659),                         <mask id, mask-2,  fill, white,                             <use xlink:href, path-1, ></use>,                         </mask>,                         <g id, Clip-8, ></g>,                         <path d, M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146,                               id, Fill-7,  fill, 467C45,                               mask, url(, mask-2), ></path>,                     </g>,                     <path d, M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049,                           id, Fill-10,  fill, 467C45, ></path>,                     <path d, M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207,                           id, Fill-12,  fill, 467C45, ></path>,                     <path d, M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555,                           id, Fill-14,  fill, 467C45, ></path>,                     <path d, M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488,                           id, Fill-16,  fill, 467C45, ></path>,                 </g>,             </g>,         </g>,     </svg>, </div>,       <div id, text,         Please wait while your request is being verified...,       </div>,     </div>,   </div>,   <div id, y7lixqx7d6cd, ></div>,   <script>, (function(U,s), var a0I, U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e, a0P,m, while(, var P, parseInt(N(a0I.U))/0x1, parseInt(N(0x197))/0x2, (parseInt(N(a0I.s))/0x3), -parseInt(N(a0I.m))/0x4, -parseInt(N(0x181))/0x5, (-parseInt(N(a0I.P))/0x6), -parseInt(N(a0I.D))/0x7, parseInt(N(0x187))/0x8, (parseInt(N(a0I.L))/0x9), -parseInt(N(0x17b))/0xa, (parseInt(N(0x176))/0xb), if(P, s)break, else m['push'](m['shift']()), catch(D), m['push'](m['shift']()), (a0m,0x53061)), function a0m(), var e, ['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne, ','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((., )','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'], function(), return e, return a0m(), var a0D, window['navigator'],a0L, 'webdriverCheck':function(), var x, return'webdriver'in window, a0D[x(0x17d)], ,'userAgentCheck':function(), var a0Q, U:0x165, return/headless, bytespider/i['test'](a0D[r(a0Q.U)]), ,'appVersionCheck':function(), return/headless/i['test'](a0D['appVersion']), ,'pluginArraySpoofing':function(), var a0c, U:0x16b,s:0x18e,m:0x166, let U, PluginArray[d(0x160)], a0D[d(a0c.U)][d(a0c.s)], if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U, Plugin[d(0x160)], a0D['plugins'][0x0][d(0x18e)], return, ,'mimeTypeArraySpoofing':function(), var a0X, U:0x160,s:0x18e,m:0x160,P:0x161, let U, MimeTypeArray[Z(a0X.U)], a0D['mimeTypes'][Z(a0X.s)], if(a0D[Z(0x161)][Z(0x166)]>0x0)U, MimeType[Z(a0X.m)], a0D[Z(a0X.P)][0x0][Z(a0X.s)], return, ,'noLanguage':function(), var a0G, U:0x172, return, a0D[a(0x188)], a0D[a(a0G.U)][a(0x166)], ,'zeroOuterDimensions':function(), var H, return window[H(0x177), 't'], window[H(0x192)], ,a0v, function(m,P), var a0S, U:0x163,s:0x178,m:0x185,P:0x163,D:0x173, ,a0k, U:0x164,s:0x16d,m:0x189,P:0x175, a0P,D, (function(), var v, return function(Y,K), var C, function(), var R, if(K), var h, K[R(0x198)](Y,arguments), return K, null,h, :function(), return v, [],C, ()),L, D(this,function(), var g, return L[g(0x189)]()[g(a0k.U)](g(a0k.s), $')[g(a0k.m)]()[g(a0k.P), 'r'](L)[g(0x164)]('(((., L(),window[B(a0S.U), B(a0S.s)], window[B(a0S.m)][B(a0S.P), B(0x178)]('DOMContent', B(0x182),m,P):window[B(a0S.m)][B(0x171), 't'](B(a0S.D), B(0x16f),m), function a0P(U,s), var m, a0m(), return a0P, function(P,D), P-0x15d, var L, m[P], return L, ,a0P(U,s), a0v(function(), var a0p, U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f, setTimeout(function(), var E, a0P,U, window['document'][E(a0p.U), E(a0p.s)]('y7lixqx7d6cd'),s, [])),m, window['document'][E(0x174), 'ent'](E(0x183)),P, window[E(a0p.m)][E(a0p.P), E(0x168)]('input'),D, window[E(0x185)][E(a0p.D), E(a0p.L)]('input'),L, window['document'][E(0x174), E(a0p.L)](E(a0p.v)),v, window[E(a0p.m)]['createElem', E(0x168)]('input'),Y, [])),K, 'wsidchk',C, 'pdata',h, 'http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o, '/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y, 'failedChecks',q, Object[E(0x186)](a0L)[E(a0p.Y)](([T,F]), return F(), T:null, catch(t), return null, )[E(a0p.K)](T, null),O, q[E(0x166)]>0x0, if(O), var A, new URLSearchParams(), A[E(a0p.C)]('id',E(0x17f), E(a0p.h), E(0x16e), '9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s, Y),A[E(0x17a)](C,h),q[E(0x191)](T, >A[E(0x17a)](y,T)), var V, new XMLHttpRequest(), V[E(a0p.o)]('GET',o, A[E(0x189)]()),V[E(a0p.y)](null), else m['id'], 'y7lixqx7d6cd',m['style'], E(a0p.q), E(0x162),m['method'], E(a0p.O),m['action'], o,P['id'], 'uipgmf63ilku',P['name'], K,P[E(0x194)], Y,P[E(0x195)], 'hidden',L[E(0x18f)], 'id',L[E(a0p.A)], E(a0p.V), '60b54a2be4', E(0x184), 'c7',L[E(0x195)], E(a0p.T),v['name'], 'ts',v['value'], '1777364229',v[E(a0p.F)], 'hidden',D['id'], 'v3w53kricso8',D[E(0x18f)], C,D[E(0x194)], h,D[E(a0p.t)], 'hidden',m[E(0x18d), 'd'](P),m[E(a0p.I), 'd'](D),m[E(0x18d), 'd'](L),m['appendChil', 'd'](v),U['appendChil', 'd'](m),m[E(a0p.z)](), ,0x3e8),   </script>, </body>, </html>\",3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 30 29 3b 0a 20 20 20 20 20 20 7d 28 29 29 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4f 6e 65 20 6d 6f 6d 65 6e 74 2c 20 70 6c 65 61 73 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 2e 73 70 69 6e 6e 65 72 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 7d 0a 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 23 74 65 78 74 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 6f 70 74 69 63 61 6c 2d 73 69 7a 69 6e 67 3a 20 61 75 74 6f 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 2e 34 65 6d 20 30 20 2e 32 65 6d 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 38 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 36 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 35 34 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 37 32 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 35 30 70 78 29 20 7b 0a 20 20 20 20 2e 74 68 72 6f 62 62 65 72 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 36 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 72 67 62 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 31 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 68 72 6f 62 62 65 72 22 3e 0a 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 22 20 77 69 64 74 68 3d 22 39 30 70 78 22 20 68 65 69 67 68 74 3d 22 39 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 37 20 34 37 22 0a 20 20 20 20 20 20 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f 61 64 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 30 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 30 2e 33 37 35 34 38 34 31 34 36 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 4c 6f 67 6f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 2e 30 30 30 30 30 30 2c 20 2d 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 35 2e 30 30 30 30 30 30 2c 20 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 43 32 33 2e 31 35 33 38 30 34 39 2c 33 2e 30 36 32 35 36 35 38 35 20 32 33 2e 36 30 33 31 37 30 37 2c 31 2e 35 39 35 38 32 31 39 35 20 32 34 2e 32 33 31 39 33 39 2c 30 2e 31 35 38 38 38 32 39 32 37 20 43 32 35 2e 31 39 30 32 38 30 35 2c 32 2e 32 32 34 35 39 30 32 34 20 32 35 2e 38 31 39 30 34 38 38 2c 34 2e 34 33 39 38 39 35 31 32 20 32 36 2e 37 37 36 38 31 37 31 2c 36 2e 34 37 35 37 39 37 35 36 20 43 32 39 2e 31 34 31 37 31 39 35 2c 37 2e 34 30 33 37 36 30 39 38 20 33 31 2e 37 31 36 34 30 32 34 2c 37 2e 37 39 32 39 34 33 39 20 33 34 2e 31 31 31 36 38 32 39 2c 38 2e 36 39 31 31 30 32 34 34 20 43 32 38 2e 39 36 32 33 31 37 31 2c 31 31 2e 32 36 36 33 35 38 35 20 32 33 2e 37 32 32 39 36 33 34 2c 31 33 2e 37 35 31 30 35 33 37 20 31 38 2e 34 38 33 36 30 39 38 2c 31 36 2e 31 37 36 31 33 39 20 43 31 39 2e 37 37 30 39 35 31 32 2c 31 32 2e 32 35 34 35 30 34 39 20 32 31 2e 32 33 38 32 36 38 33 2c 38 2e 34 32 31 37 31 32 32 20 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 4c 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 20 43 31 36 2e 31 34 32 34 39 33 39 2c 37 2e 36 38 30 37 37 34 33 39 20 31 38 2e 34 35 30 30 37 39 33 2c 36 2e 32 38 39 36 38 39 30 32 20 32 30 2e 38 32 30 37 31 33 34 2c 35 2e 30 32 35 32 37 34 33 39 20 43 31 38 2e 39 32 34 30 39 31 35 2c 31 30 2e 38 34 31 32 33 37 38 20 31 36 2e 37 37 34 37 30 31 32 2c 31 36 2e 35 36 31 34 38 31 37 20 31 34 2e 38 34 36 35 35 34 39 2c 32 32 2e 33 37 37 34 34 35 31 20 43 31 32 2e 37 32 39 32 36 32 32 2c 31 38 2e 33 39 35 30 35 34 39 20 31 30 2e 38 39 35 36 38 39 2c 31 34 2e 32 35 34 34 36 39 35 20 38 2e 39 30 34 34 39 33 39 2c 31 30 2e 32 30 39 30 33 30 35 20 43 38 2e 32 37 32 32 38 36 35 39 2c 38 2e 38 35 30 30 34 32 36 38 20 37 2e 35 34 35 35 30 36 31 2c 37 2e 35 35 33 35 33 30 34 39 20 37 2e 30 30 38 34 34 35 31 32 2c 36 2e 31 36 33 35 39 31 34 36 20 43 39 2e 33 31 35 34 35 37 33 32 2c 36 2e 39 35 33 34 32 30 37 33 20 31 31 2e 34 36 34 38 34 37 36 2c 38 2e 32 34 39 33 35 39 37 36 20 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 20 43 32 39 2e 34 36 30 32 33 30 35 2c 31 32 2e 34 39 36 39 35 36 31 20 33 34 2e 37 33 37 39 38 36 36 2c 39 2e 39 31 39 34 30 37 33 32 20 34 30 2e 30 31 35 37 34 32 37 2c 37 2e 34 30 33 31 38 37 38 20 43 33 39 2e 31 35 36 35 35 39 38 2c 39 2e 36 31 32 37 36 30 39 38 20 33 38 2e 31 37 34 37 31 38 33 2c 31 31 2e 37 33 30 30 35 33 37 20 33 37 2e 32 32 33 32 35 34 39 2c 31 33 2e 39 30 38 36 37 35 36 20 43 33 38 2e 34 35 30 34 31 33 34 2c 31 36 2e 32 30 39 39 35 36 31 20 33 39 2e 39 35 34 34 31 33 34 2c 31 38 2e 33 38 38 35 37 38 20 34 31 2e 30 38 39 38 36 34 36 2c 32 30 2e 37 35 31 31 38 37 38 20 43 33 35 2e 34 34 33 35 35 39 38 2c 31 38 2e 39 34 30 35 34 31 35 20 32 39 2e 38 32 38 37 37 39 33 2c 31 37 2e 30 33 38 31 38 37 38 20 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 35 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 30 30 30 30 2c 20 31 31 2e 39 31 39 36 35 39 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 2d 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 61 74 68 2d 31 22 3e 3c 2f 75 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6d 61 73 6b 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 2d 38 22 3e 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 20 43 39 2e 39 33 30 36 34 31 34 36 2c 33 2e 33 33 34 31 39 31 34 36 20 31 31 2e 32 37 38 31 36 35 39 2c 36 2e 34 33 39 36 33 30 34 39 20 31 32 2e 37 34 32 36 31 37 31 2c 39 2e 34 35 36 32 32 38 30 35 20 43 31 33 2e 37 33 38 37 38 37 38 2c 31 31 2e 35 33 36 32 36 34 36 20 31 34 2e 37 39 33 34 32 32 2c 31 33 2e 35 38 37 36 34 32 37 20 31 35 2e 37 30 31 33 32 34 34 2c 31 35 2e 37 32 35 35 36 39 35 20 43 31 30 2e 34 35 37 39 35 38 35 2c 31 33 2e 39 30 39 31 39 31 35 20 35 2e 32 31 34 30 31 39 35 31 2c 31 32 2e 30 33 34 33 35 20 2d 30 2e 30 30 30 31 31 34 36 33 34 31 34 36 2c 31 30 2e 30 37 31 38 31 33 34 20 43 32 2e 30 35 30 36 39 30 32 34 2c 39 2e 31 33 34 31 30 36 31 20 34 2e 32 31 38 34 32 31 39 35 2c 38 2e 34 38 39 38 36 32 32 20 36 2e 32 39 38 34 35 38 35 34 2c 37 2e 36 31 31 31 39 31 34 36 20 43 36 2e 39 37 31 39 33 34 31 35 2c 35 2e 31 37 39 38 30 31 32 32 20 37 2e 36 37 35 32 31 34 36 33 2c 32 2e 37 37 37 30 36 39 35 31 20 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 37 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 3d 22 75 72 6c 28 23 6d 61 73 6b 2d 32 29 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 20 43 33 33 2e 35 36 30 30 36 33 34 2c 31 39 2e 34 36 37 30 35 36 31 20 33 37 2e 39 30 38 31 33 36 36 2c 32 31 2e 30 37 37 36 36 35 39 20 34 32 2e 32 38 38 38 38 30 35 2c 32 32 2e 35 35 39 33 31 32 32 20 43 34 33 2e 36 37 34 32 33 34 31 2c 32 33 2e 30 37 34 35 39 32 37 20 34 35 2e 31 35 35 38 38 30 35 2c 32 33 2e 34 36 30 39 30 39 38 20 34 36 2e 35 30 38 35 36 33 34 2c 32 34 2e 31 33 37 32 35 31 32 20 43 34 34 2e 32 32 31 36 31 32 32 2c 32 35 2e 30 33 39 34 32 32 20 34 31 2e 39 30 32 35 36 33 34 2c 32 35 2e 39 31 30 30 36 38 33 20 33 39 2e 36 34 37 37 30 39 38 2c 32 36 2e 38 31 31 30 39 32 37 20 43 33 38 2e 38 31 30 33 30 37 33 2c 32 39 2e 34 31 39 35 39 32 37 20 33 38 2e 32 33 30 32 35 38 35 2c 33 32 2e 31 32 36 31 30 34 39 20 33 37 2e 33 36 30 37 35 38 35 2c 33 34 2e 37 33 34 36 30 34 39 20 43 33 35 2e 35 38 39 30 38 37 38 2c 33 31 2e 34 34 39 37 36 33 34 20 33 34 2e 30 34 33 32 34 36 33 2c 32 38 2e 30 33 35 33 38 35 34 20 33 32 2e 33 36 38 34 34 31 35 2c 32 34 2e 36 38 35 32 30 32 34 20 43 33 31 2e 33 30 35 32 30 39 38 2c 32 32 2e 34 39 34 35 34 33 39 20 33 30 2e 31 34 35 36 38 35 34 2c 32 30 2e 33 30 34 34 35 38 35 20 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 30 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 20 43 32 39 2e 35 37 38 39 39 31 35 2c 32 37 2e 36 39 34 37 35 20 33 30 2e 30 36 38 34 37 39 33 2c 32 36 2e 30 31 31 33 34 37 36 20 33 30 2e 37 34 31 39 35 34 39 2c 32 34 2e 33 38 38 37 30 31 32 20 43 33 31 2e 35 33 38 30 38 39 2c 32 35 2e 37 36 36 30 33 30 35 20 33 32 2e 31 38 31 31 38 36 36 2c 32 37 2e 32 33 35 36 34 30 32 20 33 32 2e 39 31 35 34 31 38 33 2c 32 38 2e 36 34 34 34 39 33 39 20 43 33 34 2e 37 32 32 30 35 32 34 2c 33 32 2e 34 37 30 39 38 31 37 20 33 36 2e 36 38 31 31 35 2c 33 36 2e 32 30 35 31 38 39 20 33 38 2e 34 35 36 38 33 32 39 2c 34 30 2e 30 33 31 36 37 36 38 20 43 33 36 2e 32 38 32 37 39 36 33 2c 33 39 2e 31 34 34 39 38 31 37 20 33 34 2e 31 34 30 32 38 34 31 2c 33 38 2e 31 36 35 34 33 32 39 20 33 31 2e 39 33 36 34 34 32 37 2c 33 37 2e 32 34 36 30 36 37 31 20 43 32 39 2e 36 34 30 33 32 30 37 2c 33 38 2e 34 37 30 39 33 32 39 20 32 37 2e 34 36 36 32 38 34 31 2c 33 39 2e 39 34 30 35 34 32 37 20 32 35 2e 31 30 39 34 30 36 31 2c 34 31 2e 31 30 33 35 30 36 31 20 43 32 36 2e 33 30 33 33 32 30 37 2c 33 37 2e 31 35 34 39 33 32 39 20 32 37 2e 37 34 31 39 37 39 33 2c 33 33 2e 32 36 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 33 33 38 35 31 32 32 2c 32 37 2e 31 38 37 33 37 39 33 20 31 34 2e 37 37 33 37 30 34 39 2c 32 39 2e 30 33 36 34 32 38 20 31 39 2e 36 37 34 38 38 37 38 2c 33 30 2e 36 37 30 35 33 37 38 20 43 32 30 2e 34 31 34 38 35 31 32 2c 33 30 2e 39 31 37 30 30 31 32 20 32 31 2e 31 35 34 32 34 31 35 2c 33 31 2e 31 39 34 34 31 35 39 20 32 31 2e 38 33 32 38 37 35 36 2c 33 31 2e 35 33 33 37 33 32 39 20 43 31 36 2e 35 33 30 34 37 33 32 2c 33 33 2e 39 36 38 35 36 32 32 20 31 31 2e 33 32 31 34 39 37 36 2c 33 36 2e 36 34 39 38 35 34 39 20 35 2e 39 35 37 37 36 35 38 35 2c 33 38 2e 39 39 33 35 35 20 43 36 2e 38 32 30 39 36 30 39 38 2c 33 36 2e 38 33 35 35 36 32 32 20 37 2e 38 39 39 36 36 38 32 39 2c 33 34 2e 37 36 39 38 35 34 39 20 38 2e 37 33 31 39 31 32 32 2c 33 32 2e 35 38 31 34 38 39 20 43 37 2e 36 38 33 35 38 32 39 33 2c 33 30 2e 31 37 36 34 36 34 36 20 36 2e 31 31 31 39 34 38 37 38 2c 32 38 2e 30 31 39 30 35 20 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 34 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 20 43 31 39 2e 34 36 37 31 31 33 34 2c 33 33 2e 39 33 31 37 30 37 33 20 32 33 2e 34 34 38 33 35 37 33 2c 33 31 2e 38 39 35 32 33 31 37 20 32 37 2e 34 39 31 35 30 33 37 2c 33 30 2e 30 34 33 33 31 37 31 20 43 32 36 2e 34 31 31 30 37 36 38 2c 33 33 2e 36 35 34 32 39 32 37 20 32 35 2e 30 32 32 32 38 34 31 2c 33 37 2e 32 30 33 39 33 39 20 32 33 2e 38 31 38 36 32 35 36 2c 34 30 2e 38 31 34 33 34 31 35 20 43 32 33 2e 31 30 39 30 34 30 32 2c 34 32 2e 37 32 37 35 38 35 34 20 32 32 2e 35 35 33 30 36 34 36 2c 34 34 2e 37 30 33 33 30 34 39 20 32 31 2e 37 35 31 31 39 38 38 2c 34 36 2e 35 38 35 35 39 37 36 20 43 32 30 2e 37 36 33 30 35 32 34 2c 34 34 2e 34 38 36 36 34 36 33 20 32 30 2e 30 35 33 34 36 37 31 2c 34 32 2e 32 36 35 30 33 36 36 20 31 39 2e 31 32 37 37 39 36 33 2c 34 30 2e 31 33 35 31 33 34 31 20 43 31 36 2e 36 32 37 36 32 35 36 2c 33 39 2e 32 30 39 34 36 33 34 20 31 34 2e 30 30 34 32 32 33 32 2c 33 38 2e 36 38 34 34 33 39 20 31 31 2e 34 37 33 36 37 34 34 2c 33 37 2e 39 37 34 38 35 33 37 20 43 31 32 2e 36 37 37 33 33 32 39 2c 33 37 2e 30 38 30 31 33 34 31 20 31 34 2e 31 35 38 34 30 36 31 2c 33 36 2e 35 38 36 30 36 31 20 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 36 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 73 76 67 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 50 6c 65 61 73 65 20 77 61 69 74 20 77 68 69 6c 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 69 73 20 62 65 69 6e 67 20 76 65 72 69 66 69 65 64 2e 2e 2e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 79 37 6c 69 78 71 78 37 64 36 63 64 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 55 2c 73 29 7b 76 61 72 20 61 30 49 3d 7b 55 3a 30 78 31 37 65 2c 73 3a 30 78 31 36 61 2c 6d 3a 30 78 31 36 39 2c 50 3a 30 78 31 39 33 2c 44 3a 30 78 31 39 30 2c 4c 3a 30 78 31 35 65 7d 2c 4e 3d 61 30 50 2c 6d 3d 55 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 50 3d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 55 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 39 37 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 73 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 6d 29 29 2f 30 78 34 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 31 29 29 2f 30 78 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 50 29 29 2f 30 78 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 44 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 37 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 4c 29 29 2f 30 78 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 62 29 29 2f 30 78 61 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 36 29 29 2f 30 78 62 29 3b 69 66 28 50 3d 3d 3d 73 29 62 72 65 61 6b 3b 65 6c 73 65 20 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 44 29 7b 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 6d 2c 30 78 35 33 30 36 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 30 6d 28 29 7b 76 61 72 20 65 3d 5b 27 66 6f 72 6d 27 2c 27 64 34 39 30 33 30 62 33 34 39 27 2c 27 64 6f 63 75 6d 65 6e 74 27 2c 27 65 6e 74 72 69 65 73 27 2c 27 31 36 71 76 41 42 6f 6e 27 2c 27 6c 61 6e 67 75 61 67 65 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 69 6e 70 75 74 27 2c 27 42 79 49 64 27 2c 27 67 65 74 45 6c 65 6d 65 6e 74 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 27 2c 27 5f 5f 70 72 6f 74 6f 5f 5f 27 2c 27 6e 61 6d 65 27 2c 27 31 35 37 31 35 30 4a 62 44 43 45 59 27 2c 27 66 6f 72 45 61 63 68 27 2c 27 6f 75 74 65 72 57 69 64 74 68 27 2c 27 33 33 38 36 38 32 62 59 62 6c 48 68 27 2c 27 76 61 6c 75 65 27 2c 27 74 79 70 65 27 2c 27 64 69 73 70 6c 61 79 3a 6e 6f 27 2c 27 34 36 6c 65 48 41 57 46 27 2c 27 61 70 70 6c 79 27 2c 27 47 45 54 27 2c 27 6d 61 70 27 2c 27 32 33 36 37 35 38 35 57 73 65 58 4f 77 27 2c 27 73 75 62 6d 69 74 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 6d 69 6d 65 54 79 70 65 73 27 2c 27 6e 65 3b 27 2c 27 61 64 64 45 76 65 6e 74 4c 69 27 2c 27 73 65 61 72 63 68 27 2c 27 75 73 65 72 41 67 65 6e 74 27 2c 27 6c 65 6e 67 74 68 27 2c 27 6f 70 65 6e 27 2c 27 65 6e 74 27 2c 27 32 39 32 32 38 38 4b 5a 43 4f 6a 70 27 2c 27 36 39 38 35 35 6a 59 63 49 71 68 27 2c 27 70 6c 75 67 69 6e 73 27 2c 27 31 62 34 31 62 30 38 66 31 32 27 2c 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2c 27 30 39 35 30 36 33 35 30 32 37 27 2c 27 74 65 63 68 61 6e 67 65 27 2c 27 66 69 6c 74 65 72 27 2c 27 61 74 74 61 63 68 45 76 65 6e 27 2c 27 6c 61 6e 67 75 61 67 65 73 27 2c 27 6f 6e 72 65 61 64 79 73 74 61 27 2c 27 63 72 65 61 74 65 45 6c 65 6d 27 2c 27 63 6f 6e 73 74 72 75 63 74 6f 27 2c 27 31 31 56 61 6c 50 72 4b 27 2c 27 6f 75 74 65 72 48 65 69 67 68 27 2c 27 73 74 65 6e 65 72 27 2c 27 37 66 61 33 62 37 36 37 63 34 27 2c 27 61 70 70 65 6e 64 27 2c 27 31 33 34 34 39 37 39 30 4a 50 6b 54 78 45 27 2c 27 73 65 6e 64 27 2c 27 77 65 62 64 72 69 76 65 72 27 2c 27 36 36 32 34 33 34 64 4a 66 75 69 61 27 2c 27 61 36 31 30 35 63 30 61 36 31 27 2c 27 68 69 64 64 65 6e 27 2c 27 35 4e 6c 6e 77 49 49 27 2c 27 4c 6f 61 64 65 64 27 5d 3b 61 30 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3b 7d 3b 72 65 74 75 72 6e 20 61 30 6d 28 29 3b 7d 76 61 72 20 61 30 44 3d 77 69 6e 64 6f 77 5b 27 6e 61 76 69 67 61 74 6f 72 27 5d 2c 61 30 4c 3d 7b 27 77 65 62 64 72 69 76 65 72 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 61 30 50 3b 72 65 74 75 72 6e 27 77 65 62 64 72 69 76 65 72 27 69 6e 20 77 69 6e 64 6f 77 7c 7c 21 21 61 30 44 5b 78 28 30 78 31 37 64 29 5d 3b 7d 2c 27 75 73 65 72 41 67 65 6e 74 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 51 3d 7b 55 3a 30 78 31 36 35 7d 2c 72 3d 61 30 50 3b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 7c 62 79 74 65 73 70 69 64 65 72 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 72 28 61 30 51 2e 55 29 5d 29 3b 7d 2c 27 61 70 70 56 65 72 73 69 6f 6e 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 27 61 70 70 56 65 72 73 69 6f 6e 27 5d 29 3b 7d 2c 27 70 6c 75 67 69 6e 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 63 3d 7b 55 3a 30 78 31 36 62 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 36 7d 2c 64 3d 61 30 50 3b 6c 65 74 20 55 3d 50 6c 75 67 69 6e 41 72 72 61 79 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 73 29 5d 3b 69 66 28 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 6d 29 5d 3e 30 78 30 29 55 26 3d 50 6c 75 67 69 6e 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 27 70 6c 75 67 69 6e 73 27 5d 5b 30 78 30 5d 5b 64 28 30 78 31 38 65 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6d 69 6d 65 54 79 70 65 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 58 3d 7b 55 3a 30 78 31 36 30 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 30 2c 50 3a 30 78 31 36 31 7d 2c 5a 3d 61 30 50 3b 6c 65 74 20 55 3d 4d 69 6d 65 54 79 70 65 41 72 72 61 79 5b 5a 28 61 30 58 2e 55 29 5d 3d 3d 3d 61 30 44 5b 27 6d 69 6d 65 54 79 70 65 73 27 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 69 66 28 61 30 44 5b 5a 28 30 78 31 36 31 29 5d 5b 5a 28 30 78 31 36 36 29 5d 3e 30 78 30 29 55 26 3d 4d 69 6d 65 54 79 70 65 5b 5a 28 61 30 58 2e 6d 29 5d 3d 3d 3d 61 30 44 5b 5a 28 61 30 58 2e 50 29 5d 5b 30 78 30 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6e 6f 4c 61 6e 67 75 61 67 65 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 47 3d 7b 55 3a 30 78 31 37 32 7d 2c 61 3d 61 30 50 3b 72 65 74 75 72 6e 21 61 30 44 5b 61 28 30 78 31 38 38 29 5d 7c 7c 61 30 44 5b 61 28 61 30 47 2e 55 29 5d 5b 61 28 30 78 31 36 36 29 5d 3d 3d 3d 30 78 30 3b 7d 2c 27 7a 65 72 6f 4f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 48 3d 61 30 50 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 48 28 30 78 31 37 37 29 2b 27 74 27 5d 3d 3d 3d 30 78 30 26 26 77 69 6e 64 6f 77 5b 48 28 30 78 31 39 32 29 5d 3d 3d 3d 30 78 30 3b 7d 7d 2c 61 30 76 3d 66 75 6e 63 74 69 6f 6e 28 6d 2c 50 29 7b 76 61 72 20 61 30 53 3d 7b 55 3a 30 78 31 36 33 2c 73 3a 30 78 31 37 38 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 36 33 2c 44 3a 30 78 31 37 33 7d 2c 61 30 6b 3d 7b 55 3a 30 78 31 36 34 2c 73 3a 30 78 31 36 64 2c 6d 3a 30 78 31 38 39 2c 50 3a 30 78 31 37 35 7d 2c 42 3d 61 30 50 2c 44 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 59 2c 4b 29 7b 76 61 72 20 43 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 61 30 50 3b 69 66 28 4b 29 7b 76 61 72 20 68 3d 4b 5b 52 28 30 78 31 39 38 29 5d 28 59 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 4b 3d 6e 75 6c 6c 2c 68 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 76 3d 21 5b 5d 2c 43 3b 7d 3b 7d 28 29 29 2c 4c 3d 44 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 61 30 50 3b 72 65 74 75 72 6e 20 4c 5b 67 28 30 78 31 38 39 29 5d 28 29 5b 67 28 61 30 6b 2e 55 29 5d 28 67 28 61 30 6b 2e 73 29 2b 27 2b 24 27 29 5b 67 28 61 30 6b 2e 6d 29 5d 28 29 5b 67 28 61 30 6b 2e 50 29 2b 27 72 27 5d 28 4c 29 5b 67 28 30 78 31 36 34 29 5d 28 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2b 27 2b 24 27 29 3b 7d 29 3b 4c 28 29 2c 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 55 29 2b 42 28 61 30 53 2e 73 29 5d 3f 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 61 30 53 2e 50 29 2b 42 28 30 78 31 37 38 29 5d 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 27 2b 42 28 30 78 31 38 32 29 2c 6d 2c 50 29 3a 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 30 78 31 37 31 29 2b 27 74 27 5d 28 42 28 61 30 53 2e 44 29 2b 42 28 30 78 31 36 66 29 2c 6d 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 30 50 28 55 2c 73 29 7b 76 61 72 20 6d 3d 61 30 6d 28 29 3b 72 65 74 75 72 6e 20 61 30 50 3d 66 75 6e 63 74 69 6f 6e 28 50 2c 44 29 7b 50 3d 50 2d 30 78 31 35 64 3b 76 61 72 20 4c 3d 6d 5b 50 5d 3b 72 65 74 75 72 6e 20 4c 3b 7d 2c 61 30 50 28 55 2c 73 29 3b 7d 61 30 76 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 70 3d 7b 55 3a 30 78 31 38 63 2c 73 3a 30 78 31 38 62 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 37 34 2c 44 3a 30 78 31 37 34 2c 4c 3a 30 78 31 36 38 2c 76 3a 30 78 31 38 61 2c 59 3a 30 78 31 35 64 2c 4b 3a 30 78 31 37 30 2c 43 3a 30 78 31 37 61 2c 68 3a 30 78 31 36 63 2c 6f 3a 30 78 31 36 37 2c 79 3a 30 78 31 37 63 2c 71 3a 30 78 31 39 36 2c 4f 3a 30 78 31 39 39 2c 41 3a 30 78 31 39 34 2c 56 3a 30 78 31 37 39 2c 54 3a 30 78 31 38 30 2c 46 3a 30 78 31 39 35 2c 74 3a 30 78 31 39 35 2c 49 3a 30 78 31 38 64 2c 7a 3a 30 78 31 35 66 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 45 3d 61 30 50 2c 55 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 61 30 70 2e 55 29 2b 45 28 61 30 70 2e 73 29 5d 28 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 29 2c 73 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 29 29 2c 6d 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 27 65 6e 74 27 5d 28 45 28 30 78 31 38 33 29 29 2c 50 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 45 28 61 30 70 2e 50 29 2b 45 28 30 78 31 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 44 3d 77 69 6e 64 6f 77 5b 45 28 30 78 31 38 35 29 5d 5b 45 28 61 30 70 2e 44 29 2b 45 28 61 30 70 2e 4c 29 5d 28 27 69 6e 70 75 74 27 29 2c 4c 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 45 28 61 30 70 2e 4c 29 5d 28 45 28 61 30 70 2e 76 29 29 2c 76 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 27 63 72 65 61 74 65 45 6c 65 6d 27 2b 45 28 30 78 31 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 59 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 29 2c 4b 3d 27 77 73 69 64 63 68 6b 27 2c 43 3d 27 70 64 61 74 61 27 2c 68 3d 27 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 76 69 61 6e 77 61 72 65 2e 63 6f 6d 25 32 46 35 32 73 37 25 32 46 25 33 46 62 6c 4e 25 33 44 5a 32 64 39 6c 61 41 68 66 61 32 25 32 36 33 6c 50 30 25 33 44 42 71 6f 79 6c 63 64 43 6c 7a 57 52 4f 77 57 56 61 32 70 74 34 73 34 57 41 71 6f 6d 25 32 42 4d 25 32 46 54 78 49 4b 62 54 49 6a 46 48 35 38 51 4c 32 52 25 32 46 41 61 55 43 77 52 30 4e 71 77 61 52 69 66 73 7a 32 6e 56 34 48 32 63 46 75 49 42 58 63 56 44 51 53 38 47 73 67 77 64 46 6e 37 57 37 55 5a 7a 78 77 38 4b 41 78 63 6b 49 32 4a 6e 66 52 75 33 50 64 43 61 71 6f 33 74 6c 56 74 69 43 72 33 69 43 4f 6c 69 25 32 46 66 77 41 25 33 44 27 2c 6f 3d 27 2f 7a 30 66 37 36 61 31 64 31 34 66 64 32 31 61 38 66 62 35 66 64 30 64 30 33 65 30 66 64 63 33 64 33 63 65 64 61 65 35 32 66 27 2c 79 3d 27 66 61 69 6c 65 64 43 68 65 63 6b 73 27 2c 71 3d 4f 62 6a 65 63 74 5b 45 28 30 78 31 38 36 29 5d 28 61 30 4c 29 5b 45 28 61 30 70 2e 59 29 5d 28 28 5b 54 2c 46 5d 29 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 46 28 29 3f 54 3a 6e 75 6c 6c 3b 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 7d 29 5b 45 28 61 30 70 2e 4b 29 5d 28 54 3d 3e 54 21 3d 3d 6e 75 6c 6c 29 2c 4f 3d 71 5b 45 28 30 78 31 36 36 29 5d 3e 30 78 30 3b 69 66 28 4f 29 7b 76 61 72 20 41 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 29 3b 41 5b 45 28 61 30 70 2e 43 29 5d 28 27 69 64 27 2c 45 28 30 78 31 37 66 29 2b 45 28 61 30 70 2e 68 29 2b 45 28 30 78 31 36 65 29 2b 27 39 65 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 27 74 73 27 2c 27 31 37 37 37 33 36 34 32 32 39 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 4b 2c 73 2b 59 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 43 2c 68 29 2c 71 5b 45 28 30 78 31 39 31 29 5d 28 54 3d 3e 41 5b 45 28 30 78 31 37 61 29 5d 28 79 2c 54 29 29 3b 76 61 72 20 56 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 56 5b 45 28 61 30 70 2e 6f 29 5d 28 27 47 45 54 27 2c 6f 2b 27 3f 27 2b 41 5b 45 28 30 78 31 38 39 29 5d 28 29 29 2c 56 5b 45 28 61 30 70 2e 79 29 5d 28 6e 75 6c 6c 29 3b 7d 65 6c 73 65 20 6d 5b 27 69 64 27 5d 3d 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 2c 6d 5b 27 73 74 79 6c 65 27 5d 3d 45 28 61 30 70 2e 71 29 2b 45 28 30 78 31 36 32 29 2c 6d 5b 27 6d 65 74 68 6f 64 27 5d 3d 45 28 61 30 70 2e 4f 29 2c 6d 5b 27 61 63 74 69 6f 6e 27 5d 3d 6f 2c 50 5b 27 69 64 27 5d 3d 27 75 69 70 67 6d 66 36 33 69 6c 6b 75 27 2c 50 5b 27 6e 61 6d 65 27 5d 3d 4b 2c 50 5b 45 28 30 78 31 39 34 29 5d 3d 73 2b 59 2c 50 5b 45 28 30 78 31 39 35 29 5d 3d 27 68 69 64 64 65 6e 27 2c 4c 5b 45 28 30 78 31 38 66 29 5d 3d 27 69 64 27 2c 4c 5b 45 28 61 30 70 2e 41 29 5d 3d 45 28 61 30 70 2e 56 29 2b 27 36 30 62 35 34 61 32 62 65 34 27 2b 45 28 30 78 31 38 34 29 2b 27 63 37 27 2c 4c 5b 45 28 30 78 31 39 35 29 5d 3d 45 28 61 30 70 2e 54 29 2c 76 5b 27 6e 61 6d 65 27 5d 3d 27 74 73 27 2c 76 5b 27 76 61 6c 75 65 27 5d 3d 27 31 37 37 37 33 36 34 32 32 39 27 2c 76 5b 45 28 61 30 70 2e 46 29 5d 3d 27 68 69 64 64 65 6e 27 2c 44 5b 27 69 64 27 5d 3d 27 76 33 77 35 33 6b 72 69 63 73 6f 38 27 2c 44 5b 45 28 30 78 31 38 66 29 5d 3d 43 2c 44 5b 45 28 30 78 31 39 34 29 5d 3d 68 2c 44 5b 45 28 61 30 70 2e 74 29 5d 3d 27 68 69 64 64 65 6e 27 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 50 29 2c 6d 5b 45 28 61 30 70 2e 49 29 2b 27 64 27 5d 28 44 29 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 4c 29 2c 6d 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 76 29 2c 55 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 6d 29 2c 6d 5b 45 28 61 30 70 2e 7a 29 5d 28 29 3b 7d 2c 30 78 33 65 38 29 3b 7d 2c 21 5b 5d 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a\n2026-04-29T19:32:30.203968,Tool:tmpshtww47t/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpshtww47t/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T19:32:30.209637,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpshtww47t/carved/scalpel/audit.txt,468,169f27adb44c751d8f49ba4637f7808b,b72dedd9792273dc107361f4ed90e2719854546c495dedc8b3727267a20a34ab,4.96,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 19:32:30 2026, Command line:, scalpel -c /tmp/tmpshtww47t/carved/scalpel.conf /tmp/filtered_c6cem_9s.pcap -o /tmp/tmpshtww47t/carved/scalpel , Output directory: /tmp/tmpshtww47t/carved/scalpel, Configuration file: /tmp/tmpshtww47t/carved/scalpel.conf, Opening target , /tmp/filtered_c6cem_9s.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Wed Apr 29 19:32:30 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a\n2026-04-29T19:32:30.200675,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpshtww47t/carved/foremost/audit.txt,753,85fbf620078477c79bd9376f0b2ae21d,8b15fd7ffc8f9254033b7f332532290b27197a67c56879312e4c5dec1842080c,4.91,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 19:32:30 2026, Invocation: foremost -t all -i /tmp/filtered_c6cem_9s.pcap -o /tmp/tmpshtww47t/carved/foremost , Output directory: /tmp/tmpshtww47t/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_c6cem_9s.pcap, Start: Wed Apr 29 19:32:30 2026, Length: 18 KB (18860 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , 00000011.htm ,       12 KB ,        5842 , Finish: Wed Apr 29 19:32:30 2026, 1 FILES EXTRACTED, htm:, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 19:32:30 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 73 68 74 77 77 34 37 74 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 63 36 63 65 6d 5f 39 73 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 31 38 20 4b 42 20 28 31 38 38 36 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 30 3a 09 30 30 30 30 30 30 31 31 2e 68 74 6d 20 09 20 20 20 20 20 20 31 32 20 4b 42 20 09 20 20 20 20 20 20 20 35 38 34 32 20 09 20 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a 0a 31 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 68 74 6d 3a 3d 20 31 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 39 3a 33 32 3a 33 30 20 32 30 32 36 0a\n2026-04-29T19:32:30.200675,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000011.htm,htm,/tmp/tmpshtww47t/carved/foremost/htm/00000011.htm,12746,0e651236d421e3b1b349d710b3a802ac,41aa31b102b1443d292be7f5202da35185dae7316eb87e3431aca132db4e0e61,5.78,\"<html lang, <head>,   <meta charset, utf8,   <meta name, viewport,  content, width, device-width,initial-scale,   <script>,       (function(),           setTimeout(function(),               window.location.reload(),           , , 5000),       ,   </script>,   <link rel, icon,  href, data:,,   <title>One moment, please...</title>,   <style>, .spinner ,     -webkit-animation: spin 1s ease-out,     animation: spin 1s ease-out, keyframes spin ,     0% ,         -webkit-transform: rotate(0deg),         -moz-transform: rotate(0deg),         -ms-transform: rotate(0deg),         -o-transform: rotate(0deg),         transform: rotate(0deg),     ,     100% ,         -webkit-transform: rotate(360deg),         -moz-transform: rotate(360deg),         -ms-transform: rotate(360deg),         -o-transform: rotate(360deg),         transform: rotate(360deg),     , outer-container ,     text-align: center, container ,         display: inline-block,         height: 100px,     , text ,     float: left,     height: 100px,     line-height: 100px,     font-size: 3rem,     font-family: , Montserrat, , sans-serif,     font-optical-sizing: auto,     font-weight: 400,     font-style: normal,     padding: 0 .4em 0 .2em,     letter-spacing: 0.06em,     color: rgba(38, 122, 72, 0.86), media (min-height: 180px) ,     , outer-container ,         margin-top: 0,     , media (min-height: 360px) ,     , outer-container ,         margin-top: 5%,     , media (min-height: 540px) ,     , outer-container ,         margin-top: 10%,     , media (min-height: 720px) ,     , outer-container ,         margin-top: 20%,     , media (min-width: 1450px) ,     .throbber ,         width: 90px,         height: 90px,         float: left,         padding: 5px 0 5px 5px,         opacity: 0.86,     ,     , container ,         display: inline-block,         border: 3px solid rgb(38, 122, 72, 0.86),         border-radius: 51px,         height: 100px,     ,   </style>, </head>, <body>,   <div id, outer-container,     <div id, container, <div class, throbber,     <svg class, spinner,  width, 90px,  height, 90px,  viewBox, 0 0 47 47,          version,          xmlns, http://www.w3.org/2000/svg,          xmlns:xlink, http://www.w3.org/1999/xlink,         <title>Loader</title>,         <defs>,             <polygon id, path-1,                      points, 0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146, ></polygon>,         </defs>,         <g id, Page-1,  stroke, none,  stroke-width,  fill, none,            fill-rule, evenodd,             <g id, Logo,  transform, translate(-5.000000, -2.000000),                 <g id, Group-2,  transform, translate(5.000000, 2.000000),                     <path d, M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z,                           id, Fill-1,  fill, 467C45, ></path>,                     <path d, M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585,                           id, Fill-3,  fill, 467C45, ></path>,                     <path d, M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049,                           id, Fill-5,  fill, 467C45, ></path>,                     <g id, Group-9,                        transform, translate(0.000000, 11.919659),                         <mask id, mask-2,  fill, white,                             <use xlink:href, path-1, ></use>,                         </mask>,                         <g id, Clip-8, ></g>,                         <path d, M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146,                               id, Fill-7,  fill, 467C45,                               mask, url(, mask-2), ></path>,                     </g>,                     <path d, M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049,                           id, Fill-10,  fill, 467C45, ></path>,                     <path d, M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207,                           id, Fill-12,  fill, 467C45, ></path>,                     <path d, M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555,                           id, Fill-14,  fill, 467C45, ></path>,                     <path d, M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488,                           id, Fill-16,  fill, 467C45, ></path>,                 </g>,             </g>,         </g>,     </svg>, </div>,       <div id, text,         Please wait while your request is being verified...,       </div>,     </div>,   </div>,   <div id, y7lixqx7d6cd, ></div>,   <script>, (function(U,s), var a0I, U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e, a0P,m, while(, var P, parseInt(N(a0I.U))/0x1, parseInt(N(0x197))/0x2, (parseInt(N(a0I.s))/0x3), -parseInt(N(a0I.m))/0x4, -parseInt(N(0x181))/0x5, (-parseInt(N(a0I.P))/0x6), -parseInt(N(a0I.D))/0x7, parseInt(N(0x187))/0x8, (parseInt(N(a0I.L))/0x9), -parseInt(N(0x17b))/0xa, (parseInt(N(0x176))/0xb), if(P, s)break, else m['push'](m['shift']()), catch(D), m['push'](m['shift']()), (a0m,0x53061)), function a0m(), var e, ['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne, ','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((., )','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'], function(), return e, return a0m(), var a0D, window['navigator'],a0L, 'webdriverCheck':function(), var x, return'webdriver'in window, a0D[x(0x17d)], ,'userAgentCheck':function(), var a0Q, U:0x165, return/headless, bytespider/i['test'](a0D[r(a0Q.U)]), ,'appVersionCheck':function(), return/headless/i['test'](a0D['appVersion']), ,'pluginArraySpoofing':function(), var a0c, U:0x16b,s:0x18e,m:0x166, let U, PluginArray[d(0x160)], a0D[d(a0c.U)][d(a0c.s)], if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U, Plugin[d(0x160)], a0D['plugins'][0x0][d(0x18e)], return, ,'mimeTypeArraySpoofing':function(), var a0X, U:0x160,s:0x18e,m:0x160,P:0x161, let U, MimeTypeArray[Z(a0X.U)], a0D['mimeTypes'][Z(a0X.s)], if(a0D[Z(0x161)][Z(0x166)]>0x0)U, MimeType[Z(a0X.m)], a0D[Z(a0X.P)][0x0][Z(a0X.s)], return, ,'noLanguage':function(), var a0G, U:0x172, return, a0D[a(0x188)], a0D[a(a0G.U)][a(0x166)], ,'zeroOuterDimensions':function(), var H, return window[H(0x177), 't'], window[H(0x192)], ,a0v, function(m,P), var a0S, U:0x163,s:0x178,m:0x185,P:0x163,D:0x173, ,a0k, U:0x164,s:0x16d,m:0x189,P:0x175, a0P,D, (function(), var v, return function(Y,K), var C, function(), var R, if(K), var h, K[R(0x198)](Y,arguments), return K, null,h, :function(), return v, [],C, ()),L, D(this,function(), var g, return L[g(0x189)]()[g(a0k.U)](g(a0k.s), $')[g(a0k.m)]()[g(a0k.P), 'r'](L)[g(0x164)]('(((., L(),window[B(a0S.U), B(a0S.s)], window[B(a0S.m)][B(a0S.P), B(0x178)]('DOMContent', B(0x182),m,P):window[B(a0S.m)][B(0x171), 't'](B(a0S.D), B(0x16f),m), function a0P(U,s), var m, a0m(), return a0P, function(P,D), P-0x15d, var L, m[P], return L, ,a0P(U,s), a0v(function(), var a0p, U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f, setTimeout(function(), var E, a0P,U, window['document', ][E(a0p.U), E(a0p.s)]('y7lixqx7d6cd'),s, [])),m, window['document'][E(0x174), 'ent'](E(0x183)),P, window[E(a0p.m)][E(a0p.P), E(0x1, 68)]('input'),D, window[E(0x185)][E(a0p.D), E(a0p.L)]('input'),L, window['document'][E(0x174), E(a0p.L)](E(a0p.v)),v, window[E(a0p.m)]['createElem', E(0x168)]('input'),Y, [])),K, 'wsidchk',C, 'pdata',h, 'http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o, '/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y, 'failedChecks',q, Object[E(0x186)](a0L)[E(a0p.Y)](([T,F]), return F(), T:null, catch(t), return null, )[E(a0p.K)](T, null),O, q[E(0x166)]>0x0, if(O), var A, new URLSearchParams(), A[E(a0p.C)]('id',E(0x17f), E(a0p.h), E(0x16e), '9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s, Y),A[E(0x17a)](C,h),q[E(0x191)](T, >A[E(0x17a)](y,T)), var V, new XMLHttpRequest(), V[E(a0p.o)]('GET',o, A[E(0x189)]()),V[E(a0p.y)](null), else m['id'], 'y7lixqx7d6cd',m['style'], E(a0p.q), E(0x162),m['method'], E(a0p.O),m['action'], o,P['id'], 'uipgmf63ilku',P['name'], K,P[E(0x194)], Y,P[E(0x195)], 'hidden',L[E(0x18f)], 'id',L[E(a0p.A)], E(a0p.V), '60b54a2be4', E(0x184), 'c7',L[E(0x195)], E(a0p.T),v['name'], 'ts',v['value'], '1777364229',v[E(a0p.F)], 'hidden',D['id'], 'v3w53kricso8',D[E(0x18f)], C,D[E(0x194)], h,D[E(a0p.t)], 'hidden',m[E(0x18d), 'd'](P),m[E(a0p.I), 'd'](D),m[E(0x18d), 'd'](L),m['appendChil', 'd'](v),U['appendChil', 'd'](m),m[E(a0p.z)](), ,0x3e8),   </script>, </body>, </html>\",3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 30 29 3b 0a 20 20 20 20 20 20 7d 28 29 29 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4f 6e 65 20 6d 6f 6d 65 6e 74 2c 20 70 6c 65 61 73 65 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 2e 73 70 69 6e 6e 65 72 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 73 20 65 61 73 65 2d 6f 75 74 3b 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 7d 0a 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 23 74 65 78 74 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 6f 70 74 69 63 61 6c 2d 73 69 7a 69 6e 67 3a 20 61 75 74 6f 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 2e 34 65 6d 20 30 20 2e 32 65 6d 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 38 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 36 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 35 34 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 37 32 30 70 78 29 20 7b 0a 20 20 20 20 23 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 35 30 70 78 29 20 7b 0a 20 20 20 20 2e 74 68 72 6f 62 62 65 72 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 20 35 70 78 20 35 70 78 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 36 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 72 67 62 28 33 38 2c 20 31 32 32 2c 20 37 32 2c 20 30 2e 38 36 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 31 70 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 68 72 6f 62 62 65 72 22 3e 0a 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 22 20 77 69 64 74 68 3d 22 39 30 70 78 22 20 68 65 69 67 68 74 3d 22 39 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 37 20 34 37 22 0a 20 20 20 20 20 20 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f 61 64 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 30 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 31 35 2e 37 32 35 35 36 39 35 20 31 35 2e 37 30 31 33 32 34 34 20 30 2e 33 37 35 34 38 34 31 34 36 20 30 20 30 2e 33 37 35 34 38 34 31 34 36 22 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 4c 6f 67 6f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 2e 30 30 30 30 30 30 2c 20 2d 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 35 2e 30 30 30 30 30 30 2c 20 32 2e 30 30 30 30 30 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 43 32 33 2e 31 35 33 38 30 34 39 2c 33 2e 30 36 32 35 36 35 38 35 20 32 33 2e 36 30 33 31 37 30 37 2c 31 2e 35 39 35 38 32 31 39 35 20 32 34 2e 32 33 31 39 33 39 2c 30 2e 31 35 38 38 38 32 39 32 37 20 43 32 35 2e 31 39 30 32 38 30 35 2c 32 2e 32 32 34 35 39 30 32 34 20 32 35 2e 38 31 39 30 34 38 38 2c 34 2e 34 33 39 38 39 35 31 32 20 32 36 2e 37 37 36 38 31 37 31 2c 36 2e 34 37 35 37 39 37 35 36 20 43 32 39 2e 31 34 31 37 31 39 35 2c 37 2e 34 30 33 37 36 30 39 38 20 33 31 2e 37 31 36 34 30 32 34 2c 37 2e 37 39 32 39 34 33 39 20 33 34 2e 31 31 31 36 38 32 39 2c 38 2e 36 39 31 31 30 32 34 34 20 43 32 38 2e 39 36 32 33 31 37 31 2c 31 31 2e 32 36 36 33 35 38 35 20 32 33 2e 37 32 32 39 36 33 34 2c 31 33 2e 37 35 31 30 35 33 37 20 31 38 2e 34 38 33 36 30 39 38 2c 31 36 2e 31 37 36 31 33 39 20 43 31 39 2e 37 37 30 39 35 31 32 2c 31 32 2e 32 35 34 35 30 34 39 20 32 31 2e 32 33 38 32 36 38 33 2c 38 2e 34 32 31 37 31 32 32 20 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 4c 32 32 2e 36 31 35 30 32 34 34 2c 34 2e 35 32 39 38 38 32 39 33 20 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 00 00 b0 0d 00 00 06 00 00 00 58 00 00 00 00 00 00 00 80 50 06 00 e3 7d 91 db 36 00 00 00 36 00 00 00 52 54 00 57 7f 94 52 54 00 7b b7 92 08 00 45 00 00 28 06 e0 40 00 80 06 80 1b c0 a8 7a a8 c8 3a 70 49 c3 e2 00 50 73 04 e9 3f 7d 9b 4b 5e 50 10 20 14 73 ef 00 00 00 00 58 00 00 00 06 00 00 00 28 10 00 00 00 00 00 00 80 50 06 00 9f e5 91 db 06 10 00 00 06 10 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 0f f8 47 c9 40 00 40 06 6f 62 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 4b 5e 73 04 e9 3f 50 18 00 52 83 bf 00 00 3d 22 46 69 6c 6c 2d 31 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 20 43 31 36 2e 31 34 32 34 39 33 39 2c 37 2e 36 38 30 37 37 34 33 39 20 31 38 2e 34 35 30 30 37 39 33 2c 36 2e 32 38 39 36 38 39 30 32 20 32 30 2e 38 32 30 37 31 33 34 2c 35 2e 30 32 35 32 37 34 33 39 20 43 31 38 2e 39 32 34 30 39 31 35 2c 31 30 2e 38 34 31 32 33 37 38 20 31 36 2e 37 37 34 37 30 31 32 2c 31 36 2e 35 36 31 34 38 31 37 20 31 34 2e 38 34 36 35 35 34 39 2c 32 32 2e 33 37 37 34 34 35 31 20 43 31 32 2e 37 32 39 32 36 32 32 2c 31 38 2e 33 39 35 30 35 34 39 20 31 30 2e 38 39 35 36 38 39 2c 31 34 2e 32 35 34 34 36 39 35 20 38 2e 39 30 34 34 39 33 39 2c 31 30 2e 32 30 39 30 33 30 35 20 43 38 2e 32 37 32 32 38 36 35 39 2c 38 2e 38 35 30 30 34 32 36 38 20 37 2e 35 34 35 35 30 36 31 2c 37 2e 35 35 33 35 33 30 34 39 20 37 2e 30 30 38 34 34 35 31 32 2c 36 2e 31 36 33 35 39 31 34 36 20 43 39 2e 33 31 35 34 35 37 33 32 2c 36 2e 39 35 33 34 32 30 37 33 20 31 31 2e 34 36 34 38 34 37 36 2c 38 2e 32 34 39 33 35 39 37 36 20 31 33 2e 37 37 31 38 35 39 38 2c 38 2e 39 34 34 36 31 35 38 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 20 43 32 39 2e 34 36 30 32 33 30 35 2c 31 32 2e 34 39 36 39 35 36 31 20 33 34 2e 37 33 37 39 38 36 36 2c 39 2e 39 31 39 34 30 37 33 32 20 34 30 2e 30 31 35 37 34 32 37 2c 37 2e 34 30 33 31 38 37 38 20 43 33 39 2e 31 35 36 35 35 39 38 2c 39 2e 36 31 32 37 36 30 39 38 20 33 38 2e 31 37 34 37 31 38 33 2c 31 31 2e 37 33 30 30 35 33 37 20 33 37 2e 32 32 33 32 35 34 39 2c 31 33 2e 39 30 38 36 37 35 36 20 43 33 38 2e 34 35 30 34 31 33 34 2c 31 36 2e 32 30 39 39 35 36 31 20 33 39 2e 39 35 34 34 31 33 34 2c 31 38 2e 33 38 38 35 37 38 20 34 31 2e 30 38 39 38 36 34 36 2c 32 30 2e 37 35 31 31 38 37 38 20 43 33 35 2e 34 34 33 35 35 39 38 2c 31 38 2e 39 34 30 35 34 31 35 20 32 39 2e 38 32 38 37 37 39 33 2c 31 37 2e 30 33 38 31 38 37 38 20 32 34 2e 32 31 33 34 32 35 36 2c 31 35 2e 30 37 34 35 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 35 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 30 30 30 30 2c 20 31 31 2e 39 31 39 36 35 39 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 2d 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 61 74 68 2d 31 22 3e 3c 2f 75 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6d 61 73 6b 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 2d 38 22 3e 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 20 43 39 2e 39 33 30 36 34 31 34 36 2c 33 2e 33 33 34 31 39 31 34 36 20 31 31 2e 32 37 38 31 36 35 39 2c 36 2e 34 33 39 36 33 30 34 39 20 31 32 2e 37 34 32 36 31 37 31 2c 39 2e 34 35 36 32 32 38 30 35 20 43 31 33 2e 37 33 38 37 38 37 38 2c 31 31 2e 35 33 36 32 36 34 36 20 31 34 2e 37 39 33 34 32 32 2c 31 33 2e 35 38 37 36 34 32 37 20 31 35 2e 37 30 31 33 32 34 34 2c 31 35 2e 37 32 35 35 36 39 35 20 43 31 30 2e 34 35 37 39 35 38 35 2c 31 33 2e 39 30 39 31 39 31 35 20 35 2e 32 31 34 30 31 39 35 31 2c 31 32 2e 30 33 34 33 35 20 2d 30 2e 30 30 30 31 31 34 36 33 34 31 34 36 2c 31 30 2e 30 37 31 38 31 33 34 20 43 32 2e 30 35 30 36 39 30 32 34 2c 39 2e 31 33 34 31 30 36 31 20 34 2e 32 31 38 34 32 31 39 35 2c 38 2e 34 38 39 38 36 32 32 20 36 2e 32 39 38 34 35 38 35 34 2c 37 2e 36 31 31 31 39 31 34 36 20 43 36 2e 39 37 31 39 33 34 31 35 2c 35 2e 31 37 39 38 30 31 32 32 20 37 2e 36 37 35 32 31 34 36 33 2c 32 2e 37 37 37 30 36 39 35 31 20 38 2e 33 34 38 36 39 30 32 34 2c 30 2e 33 37 35 34 38 34 31 34 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 37 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 6b 3d 22 75 72 6c 28 23 6d 61 73 6b 2d 32 29 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 20 43 33 33 2e 35 36 30 30 36 33 34 2c 31 39 2e 34 36 37 30 35 36 31 20 33 37 2e 39 30 38 31 33 36 36 2c 32 31 2e 30 37 37 36 36 35 39 20 34 32 2e 32 38 38 38 38 30 35 2c 32 32 2e 35 35 39 33 31 32 32 20 43 34 33 2e 36 37 34 32 33 34 31 2c 32 33 2e 30 37 34 35 39 32 37 20 34 35 2e 31 35 35 38 38 30 35 2c 32 33 2e 34 36 30 39 30 39 38 20 34 36 2e 35 30 38 35 36 33 34 2c 32 34 2e 31 33 37 32 35 31 32 20 43 34 34 2e 32 32 31 36 31 32 32 2c 32 35 2e 30 33 39 34 32 32 20 34 31 2e 39 30 32 35 36 33 34 2c 32 35 2e 39 31 30 30 36 38 33 20 33 39 2e 36 34 37 37 30 39 38 2c 32 36 2e 38 31 31 30 39 32 37 20 43 33 38 2e 38 31 30 33 30 37 33 2c 32 39 2e 34 31 39 35 39 32 37 20 33 38 2e 32 33 30 32 35 38 35 2c 33 32 2e 31 32 36 31 30 34 39 20 33 37 2e 33 36 30 37 35 38 35 2c 33 34 2e 37 33 34 36 30 34 39 20 43 33 35 2e 35 38 39 30 38 37 38 2c 33 31 2e 34 34 39 37 36 33 34 20 33 34 2e 30 34 33 32 34 36 33 2c 32 38 2e 30 33 35 33 38 35 34 20 33 32 2e 33 36 38 34 34 31 35 2c 32 34 2e 36 38 35 32 30 32 34 20 43 33 31 2e 33 30 35 32 30 39 38 2c 32 32 2e 34 39 34 35 34 33 39 20 33 30 2e 31 34 35 36 38 35 34 2c 32 30 2e 33 30 34 34 35 38 35 20 32 39 2e 31 37 39 33 31 39 35 2c 31 38 2e 30 34 39 36 30 34 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 30 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 20 43 32 39 2e 35 37 38 39 39 31 35 2c 32 37 2e 36 39 34 37 35 20 33 30 2e 30 36 38 34 37 39 33 2c 32 36 2e 30 31 31 33 34 37 36 20 33 30 2e 37 34 31 39 35 34 39 2c 32 34 2e 33 38 38 37 30 31 32 20 43 33 31 2e 35 33 38 30 38 39 2c 32 35 2e 37 36 36 30 33 30 35 20 33 32 2e 31 38 31 31 38 36 36 2c 32 37 2e 32 33 35 36 34 30 32 20 33 32 2e 39 31 35 34 31 38 33 2c 32 38 2e 36 34 34 34 39 33 39 20 43 33 34 2e 37 32 32 30 35 32 34 2c 33 32 2e 34 37 30 39 38 31 37 20 33 36 2e 36 38 31 31 35 2c 33 36 2e 32 30 35 31 38 39 20 33 38 2e 34 35 36 38 33 32 39 2c 34 30 2e 30 33 31 36 37 36 38 20 43 33 36 2e 32 38 32 37 39 36 33 2c 33 39 2e 31 34 34 39 38 31 37 20 33 34 2e 31 34 30 32 38 34 31 2c 33 38 2e 31 36 35 34 33 32 39 20 33 31 2e 39 33 36 34 34 32 37 2c 33 37 2e 32 34 36 30 36 37 31 20 43 32 39 2e 36 34 30 33 32 30 37 2c 33 38 2e 34 37 30 39 33 32 39 20 32 37 2e 34 36 36 32 38 34 31 2c 33 39 2e 39 34 30 35 34 32 37 20 32 35 2e 31 30 39 34 30 36 31 2c 34 31 2e 31 30 33 35 30 36 31 20 43 32 36 2e 33 30 33 33 32 30 37 2c 33 37 2e 31 35 34 39 33 32 39 20 32 37 2e 37 34 31 39 37 39 33 2c 33 33 2e 32 36 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 33 33 38 35 31 32 32 2c 32 37 2e 31 38 37 33 37 39 33 20 31 34 2e 37 37 33 37 30 34 39 2c 32 39 2e 30 33 36 34 32 38 20 31 39 2e 36 37 34 38 38 37 38 2c 33 30 2e 36 37 30 35 33 37 38 20 43 32 30 2e 34 31 34 38 35 31 32 2c 33 30 2e 39 31 37 30 30 31 32 20 32 31 2e 31 35 34 32 34 31 35 2c 33 31 2e 31 39 34 34 31 35 39 20 32 31 2e 38 33 32 38 37 35 36 2c 33 31 2e 35 33 33 37 33 32 39 20 43 31 36 2e 35 33 30 34 37 33 32 2c 33 33 2e 39 36 38 35 36 32 32 20 31 31 2e 33 32 31 34 39 37 36 2c 33 36 2e 36 34 39 38 35 34 39 20 35 2e 39 35 37 37 36 35 38 35 2c 33 38 2e 39 39 33 35 35 20 43 36 2e 38 32 30 39 36 30 39 38 2c 33 36 2e 38 33 35 35 36 32 32 20 37 2e 38 39 39 36 36 38 32 39 2c 33 34 2e 37 36 39 38 35 34 39 20 38 2e 37 33 31 39 31 32 32 2c 33 32 2e 35 38 31 34 38 39 20 43 37 2e 36 38 33 35 38 32 39 33 2c 33 30 2e 31 37 36 34 36 34 36 20 36 2e 31 31 31 39 34 38 37 38 2c 32 38 2e 30 31 39 30 35 20 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 34 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 20 43 31 39 2e 34 36 37 31 31 33 34 2c 33 33 2e 39 33 31 37 30 37 33 20 32 33 2e 34 34 38 33 35 37 33 2c 33 31 2e 38 39 35 32 33 31 37 20 32 37 2e 34 39 31 35 30 33 37 2c 33 30 2e 30 34 33 33 31 37 31 20 43 32 36 2e 34 31 31 30 37 36 38 2c 33 33 2e 36 35 34 32 39 32 37 20 32 35 2e 30 32 32 32 38 34 31 2c 33 37 2e 32 30 33 39 33 39 20 32 33 2e 38 31 38 36 32 35 36 2c 34 30 2e 38 31 34 33 34 31 35 20 43 32 33 2e 31 30 39 30 34 30 32 2c 34 32 2e 37 32 37 35 38 35 34 20 32 32 2e 35 35 33 30 36 34 36 2c 34 34 2e 37 30 33 33 30 34 39 20 32 31 2e 37 35 31 31 39 38 38 2c 34 36 2e 35 38 35 35 39 37 36 20 43 32 30 2e 37 36 33 30 35 32 34 2c 34 34 2e 34 38 36 36 34 36 33 20 32 30 2e 30 35 33 34 36 37 31 2c 34 32 2e 32 36 35 30 33 36 36 20 31 39 2e 31 32 37 37 39 36 33 2c 34 30 2e 31 33 35 31 33 34 31 20 43 31 36 2e 36 32 37 36 32 35 36 2c 33 39 2e 32 30 39 34 36 33 34 20 31 34 2e 30 30 34 32 32 33 32 2c 33 38 2e 36 38 34 34 33 39 20 31 31 2e 34 37 33 36 37 34 34 2c 33 37 2e 39 37 34 38 35 33 37 20 43 31 32 2e 36 37 37 33 33 32 39 2c 33 37 2e 30 38 30 31 33 34 31 20 31 34 2e 31 35 38 34 30 36 31 2c 33 36 2e 35 38 36 30 36 31 20 31 35 2e 34 35 34 39 31 38 33 2c 33 35 2e 38 37 37 30 34 38 38 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 36 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 73 76 67 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 50 6c 65 61 73 65 20 77 61 69 74 20 77 68 69 6c 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 69 73 20 62 65 69 6e 67 20 76 65 72 69 66 69 65 64 2e 2e 2e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 79 37 6c 69 78 71 78 37 64 36 63 64 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 55 2c 73 29 7b 76 61 72 20 61 30 49 3d 7b 55 3a 30 78 31 37 65 2c 73 3a 30 78 31 36 61 2c 6d 3a 30 78 31 36 39 2c 50 3a 30 78 31 39 33 2c 44 3a 30 78 31 39 30 2c 4c 3a 30 78 31 35 65 7d 2c 4e 3d 61 30 50 2c 6d 3d 55 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 50 3d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 55 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 39 37 29 29 2f 30 78 32 00 00 28 10 00 00 06 00 00 00 c0 0b 00 00 00 00 00 00 80 50 06 00 c5 e5 91 db 9e 0b 00 00 9e 0b 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 0b 90 47 cc 40 00 40 06 73 c7 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 5b 2e 73 04 e9 3f 50 18 00 52 7f 57 00 00 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 73 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 6d 29 29 2f 30 78 34 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 31 29 29 2f 30 78 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 50 29 29 2f 30 78 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 44 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 38 37 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 61 30 49 2e 4c 29 29 2f 30 78 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 62 29 29 2f 30 78 61 2a 28 70 61 72 73 65 49 6e 74 28 4e 28 30 78 31 37 36 29 29 2f 30 78 62 29 3b 69 66 28 50 3d 3d 3d 73 29 62 72 65 61 6b 3b 65 6c 73 65 20 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 44 29 7b 6d 5b 27 70 75 73 68 27 5d 28 6d 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 6d 2c 30 78 35 33 30 36 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 30 6d 28 29 7b 76 61 72 20 65 3d 5b 27 66 6f 72 6d 27 2c 27 64 34 39 30 33 30 62 33 34 39 27 2c 27 64 6f 63 75 6d 65 6e 74 27 2c 27 65 6e 74 72 69 65 73 27 2c 27 31 36 71 76 41 42 6f 6e 27 2c 27 6c 61 6e 67 75 61 67 65 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 69 6e 70 75 74 27 2c 27 42 79 49 64 27 2c 27 67 65 74 45 6c 65 6d 65 6e 74 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 27 2c 27 5f 5f 70 72 6f 74 6f 5f 5f 27 2c 27 6e 61 6d 65 27 2c 27 31 35 37 31 35 30 4a 62 44 43 45 59 27 2c 27 66 6f 72 45 61 63 68 27 2c 27 6f 75 74 65 72 57 69 64 74 68 27 2c 27 33 33 38 36 38 32 62 59 62 6c 48 68 27 2c 27 76 61 6c 75 65 27 2c 27 74 79 70 65 27 2c 27 64 69 73 70 6c 61 79 3a 6e 6f 27 2c 27 34 36 6c 65 48 41 57 46 27 2c 27 61 70 70 6c 79 27 2c 27 47 45 54 27 2c 27 6d 61 70 27 2c 27 32 33 36 37 35 38 35 57 73 65 58 4f 77 27 2c 27 73 75 62 6d 69 74 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 6d 69 6d 65 54 79 70 65 73 27 2c 27 6e 65 3b 27 2c 27 61 64 64 45 76 65 6e 74 4c 69 27 2c 27 73 65 61 72 63 68 27 2c 27 75 73 65 72 41 67 65 6e 74 27 2c 27 6c 65 6e 67 74 68 27 2c 27 6f 70 65 6e 27 2c 27 65 6e 74 27 2c 27 32 39 32 32 38 38 4b 5a 43 4f 6a 70 27 2c 27 36 39 38 35 35 6a 59 63 49 71 68 27 2c 27 70 6c 75 67 69 6e 73 27 2c 27 31 62 34 31 62 30 38 66 31 32 27 2c 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2c 27 30 39 35 30 36 33 35 30 32 37 27 2c 27 74 65 63 68 61 6e 67 65 27 2c 27 66 69 6c 74 65 72 27 2c 27 61 74 74 61 63 68 45 76 65 6e 27 2c 27 6c 61 6e 67 75 61 67 65 73 27 2c 27 6f 6e 72 65 61 64 79 73 74 61 27 2c 27 63 72 65 61 74 65 45 6c 65 6d 27 2c 27 63 6f 6e 73 74 72 75 63 74 6f 27 2c 27 31 31 56 61 6c 50 72 4b 27 2c 27 6f 75 74 65 72 48 65 69 67 68 27 2c 27 73 74 65 6e 65 72 27 2c 27 37 66 61 33 62 37 36 37 63 34 27 2c 27 61 70 70 65 6e 64 27 2c 27 31 33 34 34 39 37 39 30 4a 50 6b 54 78 45 27 2c 27 73 65 6e 64 27 2c 27 77 65 62 64 72 69 76 65 72 27 2c 27 36 36 32 34 33 34 64 4a 66 75 69 61 27 2c 27 61 36 31 30 35 63 30 61 36 31 27 2c 27 68 69 64 64 65 6e 27 2c 27 35 4e 6c 6e 77 49 49 27 2c 27 4c 6f 61 64 65 64 27 5d 3b 61 30 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3b 7d 3b 72 65 74 75 72 6e 20 61 30 6d 28 29 3b 7d 76 61 72 20 61 30 44 3d 77 69 6e 64 6f 77 5b 27 6e 61 76 69 67 61 74 6f 72 27 5d 2c 61 30 4c 3d 7b 27 77 65 62 64 72 69 76 65 72 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 61 30 50 3b 72 65 74 75 72 6e 27 77 65 62 64 72 69 76 65 72 27 69 6e 20 77 69 6e 64 6f 77 7c 7c 21 21 61 30 44 5b 78 28 30 78 31 37 64 29 5d 3b 7d 2c 27 75 73 65 72 41 67 65 6e 74 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 51 3d 7b 55 3a 30 78 31 36 35 7d 2c 72 3d 61 30 50 3b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 7c 62 79 74 65 73 70 69 64 65 72 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 72 28 61 30 51 2e 55 29 5d 29 3b 7d 2c 27 61 70 70 56 65 72 73 69 6f 6e 43 68 65 63 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2f 68 65 61 64 6c 65 73 73 2f 69 5b 27 74 65 73 74 27 5d 28 61 30 44 5b 27 61 70 70 56 65 72 73 69 6f 6e 27 5d 29 3b 7d 2c 27 70 6c 75 67 69 6e 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 63 3d 7b 55 3a 30 78 31 36 62 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 36 7d 2c 64 3d 61 30 50 3b 6c 65 74 20 55 3d 50 6c 75 67 69 6e 41 72 72 61 79 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 73 29 5d 3b 69 66 28 61 30 44 5b 64 28 61 30 63 2e 55 29 5d 5b 64 28 61 30 63 2e 6d 29 5d 3e 30 78 30 29 55 26 3d 50 6c 75 67 69 6e 5b 64 28 30 78 31 36 30 29 5d 3d 3d 3d 61 30 44 5b 27 70 6c 75 67 69 6e 73 27 5d 5b 30 78 30 5d 5b 64 28 30 78 31 38 65 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6d 69 6d 65 54 79 70 65 41 72 72 61 79 53 70 6f 6f 66 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 58 3d 7b 55 3a 30 78 31 36 30 2c 73 3a 30 78 31 38 65 2c 6d 3a 30 78 31 36 30 2c 50 3a 30 78 31 36 31 7d 2c 5a 3d 61 30 50 3b 6c 65 74 20 55 3d 4d 69 6d 65 54 79 70 65 41 72 72 61 79 5b 5a 28 61 30 58 2e 55 29 5d 3d 3d 3d 61 30 44 5b 27 6d 69 6d 65 54 79 70 65 73 27 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 69 66 28 61 30 44 5b 5a 28 30 78 31 36 31 29 5d 5b 5a 28 30 78 31 36 36 29 5d 3e 30 78 30 29 55 26 3d 4d 69 6d 65 54 79 70 65 5b 5a 28 61 30 58 2e 6d 29 5d 3d 3d 3d 61 30 44 5b 5a 28 61 30 58 2e 50 29 5d 5b 30 78 30 5d 5b 5a 28 61 30 58 2e 73 29 5d 3b 72 65 74 75 72 6e 21 55 3b 7d 2c 27 6e 6f 4c 61 6e 67 75 61 67 65 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 47 3d 7b 55 3a 30 78 31 37 32 7d 2c 61 3d 61 30 50 3b 72 65 74 75 72 6e 21 61 30 44 5b 61 28 30 78 31 38 38 29 5d 7c 7c 61 30 44 5b 61 28 61 30 47 2e 55 29 5d 5b 61 28 30 78 31 36 36 29 5d 3d 3d 3d 30 78 30 3b 7d 2c 27 7a 65 72 6f 4f 75 74 65 72 44 69 6d 65 6e 73 69 6f 6e 73 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 48 3d 61 30 50 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 48 28 30 78 31 37 37 29 2b 27 74 27 5d 3d 3d 3d 30 78 30 26 26 77 69 6e 64 6f 77 5b 48 28 30 78 31 39 32 29 5d 3d 3d 3d 30 78 30 3b 7d 7d 2c 61 30 76 3d 66 75 6e 63 74 69 6f 6e 28 6d 2c 50 29 7b 76 61 72 20 61 30 53 3d 7b 55 3a 30 78 31 36 33 2c 73 3a 30 78 31 37 38 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 36 33 2c 44 3a 30 78 31 37 33 7d 2c 61 30 6b 3d 7b 55 3a 30 78 31 36 34 2c 73 3a 30 78 31 36 64 2c 6d 3a 30 78 31 38 39 2c 50 3a 30 78 31 37 35 7d 2c 42 3d 61 30 50 2c 44 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 59 2c 4b 29 7b 76 61 72 20 43 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 61 30 50 3b 69 66 28 4b 29 7b 76 61 72 20 68 3d 4b 5b 52 28 30 78 31 39 38 29 5d 28 59 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 4b 3d 6e 75 6c 6c 2c 68 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 76 3d 21 5b 5d 2c 43 3b 7d 3b 7d 28 29 29 2c 4c 3d 44 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 61 30 50 3b 72 65 74 75 72 6e 20 4c 5b 67 28 30 78 31 38 39 29 5d 28 29 5b 67 28 61 30 6b 2e 55 29 5d 28 67 28 61 30 6b 2e 73 29 2b 27 2b 24 27 29 5b 67 28 61 30 6b 2e 6d 29 5d 28 29 5b 67 28 61 30 6b 2e 50 29 2b 27 72 27 5d 28 4c 29 5b 67 28 30 78 31 36 34 29 5d 28 27 28 28 28 2e 2b 29 2b 29 2b 29 27 2b 27 2b 24 27 29 3b 7d 29 3b 4c 28 29 2c 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 55 29 2b 42 28 61 30 53 2e 73 29 5d 3f 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 61 30 53 2e 50 29 2b 42 28 30 78 31 37 38 29 5d 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 27 2b 42 28 30 78 31 38 32 29 2c 6d 2c 50 29 3a 77 69 6e 64 6f 77 5b 42 28 61 30 53 2e 6d 29 5d 5b 42 28 30 78 31 37 31 29 2b 27 74 27 5d 28 42 28 61 30 53 2e 44 29 2b 42 28 30 78 31 36 66 29 2c 6d 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 30 50 28 55 2c 73 29 7b 76 61 72 20 6d 3d 61 30 6d 28 29 3b 72 65 74 75 72 6e 20 61 30 50 3d 66 75 6e 63 74 69 6f 6e 28 50 2c 44 29 7b 50 3d 50 2d 30 78 31 35 64 3b 76 61 72 20 4c 3d 6d 5b 50 5d 3b 72 65 74 75 72 6e 20 4c 3b 7d 2c 61 30 50 28 55 2c 73 29 3b 7d 61 30 76 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 30 70 3d 7b 55 3a 30 78 31 38 63 2c 73 3a 30 78 31 38 62 2c 6d 3a 30 78 31 38 35 2c 50 3a 30 78 31 37 34 2c 44 3a 30 78 31 37 34 2c 4c 3a 30 78 31 36 38 2c 76 3a 30 78 31 38 61 2c 59 3a 30 78 31 35 64 2c 4b 3a 30 78 31 37 30 2c 43 3a 30 78 31 37 61 2c 68 3a 30 78 31 36 63 2c 6f 3a 30 78 31 36 37 2c 79 3a 30 78 31 37 63 2c 71 3a 30 78 31 39 36 2c 4f 3a 30 78 31 39 39 2c 41 3a 30 78 31 39 34 2c 56 3a 30 78 31 37 39 2c 54 3a 30 78 31 38 30 2c 46 3a 30 78 31 39 35 2c 74 3a 30 78 31 39 35 2c 49 3a 30 78 31 38 64 2c 7a 3a 30 78 31 35 66 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 45 3d 61 30 50 2c 55 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 00 00 c0 0b 00 00 06 00 00 00 58 00 00 00 00 00 00 00 80 50 06 00 e4 e6 91 db 36 00 00 00 36 00 00 00 52 54 00 57 7f 94 52 54 00 7b b7 92 08 00 45 00 00 28 06 e1 40 00 80 06 80 1a c0 a8 7a a8 c8 3a 70 49 c3 e2 00 50 73 04 e9 3f 7d 9b 66 96 50 10 20 14 73 ef 00 00 00 00 58 00 00 00 06 00 00 00 b8 01 00 00 00 00 00 00 80 50 06 00 0b e7 91 db 96 01 00 00 96 01 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 01 88 47 ce 40 00 40 06 7d cd c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 66 96 73 04 e9 3f 50 18 00 52 75 4f 00 00 5d 5b 45 28 61 30 70 2e 55 29 2b 45 28 61 30 70 2e 73 29 5d 28 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 29 2c 73 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 29 29 2c 6d 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 27 65 6e 74 27 5d 28 45 28 30 78 31 38 33 29 29 2c 50 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 45 28 61 30 70 2e 50 29 2b 45 28 30 78 31 00 00 b8 01 00 00 06 00 00 00 0c 06 00 00 00 00 00 00 80 50 06 00 98 9c 93 db ea 05 00 00 ea 05 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 05 dc 47 cf 40 00 40 06 79 78 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 67 f6 73 04 e9 3f 50 10 00 52 79 a3 00 00 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 44 3d 77 69 6e 64 6f 77 5b 45 28 30 78 31 38 35 29 5d 5b 45 28 61 30 70 2e 44 29 2b 45 28 61 30 70 2e 4c 29 5d 28 27 69 6e 70 75 74 27 29 2c 4c 3d 77 69 6e 64 6f 77 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 5b 45 28 30 78 31 37 34 29 2b 45 28 61 30 70 2e 4c 29 5d 28 45 28 61 30 70 2e 76 29 29 2c 76 3d 77 69 6e 64 6f 77 5b 45 28 61 30 70 2e 6d 29 5d 5b 27 63 72 65 61 74 65 45 6c 65 6d 27 2b 45 28 30 78 31 36 38 29 5d 28 27 69 6e 70 75 74 27 29 2c 59 3d 2b 28 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 5b 5d 29 2b 28 2b 21 2b 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 2b 21 21 5b 5d 29 29 2c 4b 3d 27 77 73 69 64 63 68 6b 27 2c 43 3d 27 70 64 61 74 61 27 2c 68 3d 27 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 76 69 61 6e 77 61 72 65 2e 63 6f 6d 25 32 46 35 32 73 37 25 32 46 25 33 46 62 6c 4e 25 33 44 5a 32 64 39 6c 61 41 68 66 61 32 25 32 36 33 6c 50 30 25 33 44 42 71 6f 79 6c 63 64 43 6c 7a 57 52 4f 77 57 56 61 32 70 74 34 73 34 57 41 71 6f 6d 25 32 42 4d 25 32 46 54 78 49 4b 62 54 49 6a 46 48 35 38 51 4c 32 52 25 32 46 41 61 55 43 77 52 30 4e 71 77 61 52 69 66 73 7a 32 6e 56 34 48 32 63 46 75 49 42 58 63 56 44 51 53 38 47 73 67 77 64 46 6e 37 57 37 55 5a 7a 78 77 38 4b 41 78 63 6b 49 32 4a 6e 66 52 75 33 50 64 43 61 71 6f 33 74 6c 56 74 69 43 72 33 69 43 4f 6c 69 25 32 46 66 77 41 25 33 44 27 2c 6f 3d 27 2f 7a 30 66 37 36 61 31 64 31 34 66 64 32 31 61 38 66 62 35 66 64 30 64 30 33 65 30 66 64 63 33 64 33 63 65 64 61 65 35 32 66 27 2c 79 3d 27 66 61 69 6c 65 64 43 68 65 63 6b 73 27 2c 71 3d 4f 62 6a 65 63 74 5b 45 28 30 78 31 38 36 29 5d 28 61 30 4c 29 5b 45 28 61 30 70 2e 59 29 5d 28 28 5b 54 2c 46 5d 29 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 46 28 29 3f 54 3a 6e 75 6c 6c 3b 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 7d 29 5b 45 28 61 30 70 2e 4b 29 5d 28 54 3d 3e 54 21 3d 3d 6e 75 6c 6c 29 2c 4f 3d 71 5b 45 28 30 78 31 36 36 29 5d 3e 30 78 30 3b 69 66 28 4f 29 7b 76 61 72 20 41 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 29 3b 41 5b 45 28 61 30 70 2e 43 29 5d 28 27 69 64 27 2c 45 28 30 78 31 37 66 29 2b 45 28 61 30 70 2e 68 29 2b 45 28 30 78 31 36 65 29 2b 27 39 65 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 27 74 73 27 2c 27 31 37 37 37 33 36 34 32 32 39 27 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 4b 2c 73 2b 59 29 2c 41 5b 45 28 30 78 31 37 61 29 5d 28 43 2c 68 29 2c 71 5b 45 28 30 78 31 39 31 29 5d 28 54 3d 3e 41 5b 45 28 30 78 31 37 61 29 5d 28 79 2c 54 29 29 3b 76 61 72 20 56 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 56 5b 45 28 61 30 70 2e 6f 29 5d 28 27 47 45 54 27 2c 6f 2b 27 3f 27 2b 41 5b 45 28 30 78 31 38 39 29 5d 28 29 29 2c 56 5b 45 28 61 30 70 2e 79 29 5d 28 6e 75 6c 6c 29 3b 7d 65 6c 73 65 20 6d 5b 27 69 64 27 5d 3d 27 79 37 6c 69 78 71 78 37 64 36 63 64 27 2c 6d 5b 27 73 74 79 6c 65 27 5d 3d 45 28 61 30 70 2e 71 29 2b 45 28 30 78 31 36 32 29 2c 6d 5b 27 6d 65 74 68 6f 64 27 5d 3d 45 28 61 30 70 2e 4f 29 2c 6d 5b 27 61 63 74 69 6f 6e 27 5d 3d 6f 2c 50 5b 27 69 64 27 5d 3d 27 75 69 70 67 6d 66 36 33 69 6c 6b 75 27 2c 50 5b 27 6e 61 6d 65 27 5d 3d 4b 2c 50 5b 45 28 30 78 31 39 34 29 5d 3d 73 2b 59 2c 50 5b 45 28 30 78 31 39 35 29 5d 3d 27 68 69 64 64 65 6e 27 2c 4c 5b 45 28 30 78 31 38 66 29 5d 3d 27 69 64 27 2c 4c 5b 45 28 61 30 70 2e 41 29 5d 3d 45 28 61 30 70 2e 56 29 2b 27 36 30 62 35 34 61 32 62 65 34 27 2b 45 28 30 78 31 38 34 29 2b 27 63 37 27 2c 4c 5b 45 28 30 78 31 39 35 29 5d 3d 45 28 61 30 70 2e 54 29 2c 76 5b 27 6e 61 6d 65 27 5d 3d 27 74 73 27 2c 76 5b 27 76 61 6c 75 65 27 5d 3d 27 31 37 37 37 33 36 34 32 32 39 27 2c 76 5b 45 28 61 30 70 2e 46 29 5d 3d 27 68 69 64 64 65 6e 27 2c 44 5b 27 69 64 27 5d 3d 27 76 33 77 35 33 6b 72 69 63 73 6f 38 27 2c 44 5b 45 28 30 78 31 38 66 29 5d 3d 00 00 0c 06 00 00 06 00 00 00 20 01 00 00 00 00 00 00 80 50 06 00 c4 9c 93 db fd 00 00 00 fd 00 00 00 52 54 00 7b b7 92 52 54 00 57 7f 94 08 00 45 00 00 ef 47 d0 40 00 40 06 7e 64 c8 3a 70 49 c0 a8 7a a8 00 50 c3 e2 7d 9b 6d aa 73 04 e9 3f 50 19 00 52 74 b6 00 00 43 2c 44 5b 45 28 30 78 31 39 34 29 5d 3d 68 2c 44 5b 45 28 61 30 70 2e 74 29 5d 3d 27 68 69 64 64 65 6e 27 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 50 29 2c 6d 5b 45 28 61 30 70 2e 49 29 2b 27 64 27 5d 28 44 29 2c 6d 5b 45 28 30 78 31 38 64 29 2b 27 64 27 5d 28 4c 29 2c 6d 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 76 29 2c 55 5b 27 61 70 70 65 6e 64 43 68 69 6c 27 2b 27 64 27 5d 28 6d 29 2c 6d 5b 45 28 61 30 70 2e 7a 29 5d 28 29 3b 7d 2c 30 78 33 65 38 29 3b 7d 2c 21 5b 5d 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,34,17571,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,2,192.168.122.168,200.58.112.73,GET,www.vianware.com,http://www.vianware.com,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,18,3748,26.47%,10.67%\n50146,16,13823,23.53%,39.33%\n80,16,13823,23.53%,39.33%\n49899,9,1278,13.24%,3.64%\n49892,9,2470,13.24%,7.03%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-28 08:15:14.412706,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[TSHARK-OBJECT] fwA=,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:14.721698,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:15.331045,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:16.534231,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:17.737226,5,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb701000080062956c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)V..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46849, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:17.763853,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:18.065341,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:18.680501,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70440008006e8bdc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695c16a56fa7326b282fdd106fa623150fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd1aea0880490dafbe709117b14660e645,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:18.945971,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:19.891006,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:21.094122,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b7070000800628bbc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695c16a56fa7326b282fdd106fa623150fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd1aea0880490dafbe709117b14660e645,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:21.359711,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:22.297272,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\t@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:24.708010,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70a40008006e8b7c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695c16a56fa7326b282fdd106fa623150fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd1aea0880490dafbe709117b14660e645,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:26.238701,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:29.521637,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....jV.s&......b1P.7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1........I\n..p...F`.E\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\xc1jV\\\\xfas&\\\\xb2\\\\x82\\\\xfd\\\\xd1\\\\x06\\\\xfab1P\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\x1a\\\\xea\\\\x08\\\\x80I\\\\r\\\\xaf\\\\xbep\\\\x91\\\\x17\\\\xb1F`\\\\xe6E' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 08:15:35.852563,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:15:39.250482,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:09.232482,19,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,S,,,Ether > IP > TCP,3,TCP S Seq=1929701154 Ack=0,525400577f945254007bb79208004500003406dd400080068012c0a87aa8c83a7049c3e200507304e722000000008002faf073fb0000020405b40103030801010402,\"RT.W..RT.{....E..4..@.......z..:pI...Ps..\"\"........s...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1757, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32786, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701154, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 29691, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 08:17:09.232541,20,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2107325957 Ack=1929701155,5254007bb792525400577f94080045000034000040004006c6efc83a7049c0a87aa80050c3e27d9b3e057304e7238012a56473fb0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....:pI..z..P..}.>.s..#...ds..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 50927, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107325957, \"\"ack\"\": 1929701155, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 29691, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 08:17:09.232724,21,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701155 Ack=2107325958,525400577f945254007bb79208004500002806de40008006801dc0a87aa8c83a7049c3e200507304e7237d9b3e065010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..#}.>.P. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1758, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32797, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701155, \"\"ack\"\": 2107325958, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:09.236115,22,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,PA,,http://www.vianware.com/52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA=,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA=,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,\"RT.W..RT.{....E..D..@...~...z..:pI...Ps..#}.>.P. .v...GET /52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA= HTTP/1.1\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\nAccept-Language: en-us\nHost: www.vianware.com\nConnection: close\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 580, \"\"id\"\": 1759, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32256, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701155, \"\"ack\"\": 2107325958, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30219, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/52s7/?blN=Z2d9laAhfa2&3lP0=BqoylcdClzWROwWVa2pt4s4WAqom+M/TxIKbTIjFH58QL2R/AaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli/fwA=\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": \"\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\"\", \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": \"\"en-us\"\", \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"close\"\", \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"www.vianware.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 08:17:09.236135,23,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2107325958 Ack=1929701695,5254007bb792525400577f9408004500002847c5400040067f36c83a7049c0a87aa80050c3e27d9b3e067304e93f5010005273ef0000,RT.{..RT.W....E..(G.@.@..6.:pI..z..P..}.>.s..?P..Rs...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18373, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32566, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107325958, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 82, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.044762,24,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<!DOCTYPE html>\n<html lang=\"\"en\"\">\n<head>\n  <meta charset=\"\"utf8\"\">\n  <meta name=\"\"viewport\"\" content=\"\"width=device-width,initial-scale=1.0\"\">\n  <script>\n      (function(){\n          setTimeout(function(){\n              window.location.reload();\n          }, 5000);\n      }())\n  </script>\n  <link rel=\"\"icon\"\" href=\"\"data:,\"\">\n  <title>One moment, please...</title>\n  <style>\n.spinner {\n    -webkit-animation: spin 1s ease-out;\n    animation: spin 1s ease-out;\n}\n@keyframes spin {\n    0% {\n        -webkit-transform: rotate(0deg);\n        -moz-transform: rotate(0deg);\n        -ms-transform: rotate(0deg);\n        -o-transform: rotate(0deg);\n        transform: rotate(0deg);\n    }\n    100% {\n        -webkit-transform: rotate(360deg);\n        -moz-transform: rotate(360deg);\n        -ms-transform: rotate(360deg);\n        -o-transform: rotate(360deg);\n        transform: rotate(360deg);\n    }\n}\n#outer-container {\n    text-align: center;\n}\n#container {\n        display: inline-block;\n        height: 100px;\n    }\n#text {\n    float: left;\n    height: 100px;\n    line-height: 100px;\n    font-size: 3rem;\n    font-family: \"\"Montserrat\"\", sans-serif;\n    font-optical-sizing: auto;\n    font-weight: 400;\n    font-style: normal;\n    padding: 0 .4em 0 .2em;\n    letter-spacing: 0.06em;\n    color: rgba(38, 122, 72, 0.86);\n}\n@media (min-height: 180px) {\n    #outer-container {\n        margin-top: 0;\n    }\n}\n@media (min-height: 360px) {\n    #outer-container {\n        margin-top: 5%;\n    }\n}\n@media (min-height: 540px) {\n    #outer-container {\n        margin-top: 10%;\n    }\n}\n@media (min-height: 720px) {\n    #outer-container {\n        margin-top: 20%;\n    }\n}\n@media (min-width: 1450px) {\n    .throbber {\n        width: 90px;\n        height: 90px;\n        float: left;\n        padding: 5px 0 5px 5px;\n        opacity: 0.86;\n    }\n    #container {\n        display: inline-block;\n        border: 3px solid rgb(38, 122, 72, 0.86);\n        border-radius: 51px;\n        height: 100px;\n    }\n}\n\n  </style>\n</head>\n<body>\n  <div id=\"\"outer-container\"\">\n    <div id=\"\"container\"\">\n<div class=\"\"throbber\"\">\n    <svg class=\"\"spinner\"\" width=\"\"90px\"\" height=\"\"90px\"\" viewBox=\"\"0 0 47 47\"\"\n         version=\"\"1.1\"\"\n         xmlns=\"\"http://www.w3.org/2000/svg\"\"\n         xmlns:xlink=\"\"http://www.w3.org/1999/xlink\"\">\n        <title>Loader</title>\n        <defs>\n            <polygon id=\"\"path-1\"\"\n                     points=\"\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\"\"></polygon>\n        </defs>\n        <g id=\"\"Page-1\"\" stroke=\"\"none\"\" stroke-width=\"\"1\"\" fill=\"\"none\"\"\n           fill-rule=\"\"evenodd\"\">\n            <g id=\"\"Logo\"\" transform=\"\"translate(-5.000000, -2.000000)\"\">\n                <g id=\"\"Group-2\"\" transform=\"\"translate(5.000000, 2.000000)\"\">\n                    <path d=\"\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\"\"\n                          id\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 18374, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29149, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107325958, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 33095, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": null, \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"private, no-cache, no-store, must-revalidate, max-age=0\"\", \"\"Connection\"\": \"\"close\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"12147\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 08:17:09 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": \"\"openresty/1.27.1.1\"\", \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'cf-edge-cache': b'no-cache'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<!DOCTYPE html>\\n<html lang=\\\"\"en\\\"\">\\n<head>\\n  <meta charset=\\\"\"utf8\\\"\">\\n  <meta name=\\\"\"viewport\\\"\" content=\\\"\"width=device-width,initial-scale=1.0\\\"\">\\n  <script>\\n      (function(){\\n          setTimeout(function(){\\n              window.location.reload();\\n          }, 5000);\\n      }())\\n  </script>\\n  <link rel=\\\"\"icon\\\"\" href=\\\"\"data:,\\\"\">\\n  <title>One moment, please...</title>\\n  <style>\\n.spinner {\\n    -webkit-animation: spin 1s ease-out;\\n    animation: spin 1s ease-out;\\n}\\n@keyframes spin {\\n    0% {\\n        -webkit-transform: rotate(0deg);\\n        -moz-transform: rotate(0deg);\\n        -ms-transform: rotate(0deg);\\n        -o-transform: rotate(0deg);\\n        transform: rotate(0deg);\\n    }\\n    100% {\\n        -webkit-transform: rotate(360deg);\\n        -moz-transform: rotate(360deg);\\n        -ms-transform: rotate(360deg);\\n        -o-transform: rotate(360deg);\\n        transform: rotate(360deg);\\n    }\\n}\\n#outer-container {\\n    text-align: center;\\n}\\n#container {\\n        display: inline-block;\\n        height: 100px;\\n    }\\n#text {\\n    float: left;\\n    height: 100px;\\n    line-height: 100px;\\n    font-size: 3rem;\\n    font-family: \\\"\"Montserrat\\\"\", sans-serif;\\n    font-optical-sizing: auto;\\n    font-weight: 400;\\n    font-style: normal;\\n    padding: 0 .4em 0 .2em;\\n    letter-spacing: 0.06em;\\n    color: rgba(38, 122, 72, 0.86);\\n}\\n@media (min-height: 180px) {\\n    #outer-container {\\n        margin-top: 0;\\n    }\\n}\\n@media (min-height: 360px) {\\n    #outer-container {\\n        margin-top: 5%;\\n    }\\n}\\n@media (min-height: 540px) {\\n    #outer-container {\\n        margin-top: 10%;\\n    }\\n}\\n@media (min-height: 720px) {\\n    #outer-container {\\n        margin-top: 20%;\\n    }\\n}\\n@media (min-width: 1450px) {\\n    .throbber {\\n        width: 90px;\\n        height: 90px;\\n        float: left;\\n        padding: 5px 0 5px 5px;\\n        opacity: 0.86;\\n    }\\n    #container {\\n        display: inline-block;\\n        border: 3px solid rgb(38, 122, 72, 0.86);\\n        border-radius: 51px;\\n        height: 100px;\\n    }\\n}\\n\\n  </style>\\n</head>\\n<body>\\n  <div id=\\\"\"outer-container\\\"\">\\n    <div id=\\\"\"container\\\"\">\\n<div class=\\\"\"throbber\\\"\">\\n    <svg class=\\\"\"spinner\\\"\" width=\\\"\"90px\\\"\" height=\\\"\"90px\\\"\" viewBox=\\\"\"0 0 47 47\\\"\"\\n         version=\\\"\"1.1\\\"\"\\n         xmlns=\\\"\"http://www.w3.org/2000/svg\\\"\"\\n         xmlns:xlink=\\\"\"http://www.w3.org/1999/xlink\\\"\">\\n        <title>Loader</title>\\n        <defs>\\n            <polygon id=\\\"\"path-1\\\"\"\\n                     points=\\\"\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\\\"\"></polygon>\\n        </defs>\\n        <g id=\\\"\"Page-1\\\"\" stroke=\\\"\"none\\\"\" stroke-width=\\\"\"1\\\"\" fill=\\\"\"none\\\"\"\\n           fill-rule=\\\"\"evenodd\\\"\">\\n            <g id=\\\"\"Logo\\\"\" transform=\\\"\"translate(-5.000000, -2.000000)\\\"\">\\n                <g id=\\\"\"Group-2\\\"\" transform=\\\"\"translate(5.000000, 2.000000)\\\"\">\\n                    <path d=\\\"\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\\\"\"\\n                          id\"\"}}]\"\n2026-04-28 08:17:10.045155,25,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701695 Ack=2107329374,525400577f945254007bb79208004500002806e040008006801bc0a87aa8c83a7049c3e200507304e93f7d9b4b5e5010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.K^P. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1760, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32795, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107329374, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.071711,26,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2107329374 Ack=1929701695,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,\"=\"\"Fill-1\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\"\"\n                          id=\"\"Fill-3\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\"\"\n                          id=\"\"Fill-5\"\" fill=\"\"#467C45\"\"></path>\n                    <g id=\"\"Group-9\"\"\n                       transform=\"\"translate(0.000000, 11.919659)\"\">\n                        <mask id=\"\"mask-2\"\" fill=\"\"white\"\">\n                            <use xlink:href=\"\"#path-1\"\"></use>\n                        </mask>\n                        <g id=\"\"Clip-8\"\"></g>\n                        <path d=\"\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\"\"\n                              id=\"\"Fill-7\"\" fill=\"\"#467C45\"\"\n                              mask=\"\"url(#mask-2)\"\"></path>\n                    </g>\n                    <path d=\"\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\"\"\n                          id=\"\"Fill-10\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\"\"\n                          id=\"\"Fill-12\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\"\"\n                          id=\"\"Fill-14\"\" fill=\"\"#467C45\"\"></path>\n                    <path d=\"\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\"\"\n                          id=\"\"Fill-16\"\" fill=\"\"#467C45\"\"></path>\n                </g>\n            </g>\n        </g>\n    </svg>\n</div>\n      <div id=\"\"text\"\">\n        Please wait while your request is being verified...\n      </div>\n    </div>\n  </div>\n  <div id=\"\"y7lixqx7d6cd\"\"></div>\n  <script>\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 4088, \"\"id\"\": 18377, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28514, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107329374, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 33727, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"=\\\"\"Fill-1\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\\\"\"\\n                          id=\\\"\"Fill-3\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\\\"\"\\n                          id=\\\"\"Fill-5\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <g id=\\\"\"Group-9\\\"\"\\n                       transform=\\\"\"translate(0.000000, 11.919659)\\\"\">\\n                        <mask id=\\\"\"mask-2\\\"\" fill=\\\"\"white\\\"\">\\n                            <use xlink:href=\\\"\"#path-1\\\"\"></use>\\n                        </mask>\\n                        <g id=\\\"\"Clip-8\\\"\"></g>\\n                        <path d=\\\"\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\\\"\"\\n                              id=\\\"\"Fill-7\\\"\" fill=\\\"\"#467C45\\\"\"\\n                              mask=\\\"\"url(#mask-2)\\\"\"></path>\\n                    </g>\\n                    <path d=\\\"\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\\\"\"\\n                          id=\\\"\"Fill-10\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\\\"\"\\n                          id=\\\"\"Fill-12\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\\\"\"\\n                          id=\\\"\"Fill-14\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                    <path d=\\\"\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\\\"\"\\n                          id=\\\"\"Fill-16\\\"\" fill=\\\"\"#467C45\\\"\"></path>\\n                </g>\\n            </g>\\n        </g>\\n    </svg>\\n</div>\\n      <div id=\\\"\"text\\\"\">\\n        Please wait while your request is being verified...\\n      </div>\\n    </div>\\n  </div>\\n  <div id=\\\"\"y7lixqx7d6cd\\\"\"></div>\\n  <script>\\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\"\"}}]\"\n2026-04-28 08:17:10.071749,27,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2107333422 Ack=1929701695,5254007bb792525400577f94080045000b9047cc4000400673c7c83a7049c0a87aa80050c3e27d9b5b2e7304e93f501800527f5700002a287061727365496e74284e286130492e7329292f307833292b2d7061727365496e74284e286130492e6d29292f3078342b2d7061727365496e74284e28307831383129292f3078352a282d7061727365496e74284e286130492e5029292f307836292b2d7061727365496e74284e286130492e4429292f3078372b7061727365496e74284e28307831383729292f3078382a287061727365496e74284e286130492e4c29292f307839292b2d7061727365496e74284e28307831376229292f3078612a287061727365496e74284e28307831373629292f307862293b696628503d3d3d7329627265616b3b656c7365206d5b2770757368275d286d5b277368696674275d2829293b7d63617463682844297b6d5b2770757368275d286d5b277368696674275d2829293b7d7d7d2861306d2c3078353330363129293b66756e6374696f6e2061306d28297b76617220653d5b27666f726d272c2764343930333062333439272c27646f63756d656e74272c27656e7472696573272c273136717641426f6e272c276c616e6775616765272c27746f537472696e67272c27696e707574272c2742794964272c27676574456c656d656e74272c27617070656e644368696c272c275f5f70726f746f5f5f272c276e616d65272c273135373135304a6244434559272c27666f7245616368272c276f757465725769647468272c273333383638326259626c4868272c2776616c7565272c2774797065272c27646973706c61793a6e6f272c2734366c6548415746272c276170706c79272c27474554272c276d6170272c2732333637353835577365584f77272c277375626d6974272c2770726f746f74797065272c276d696d655479706573272c276e653b272c276164644576656e744c69272c27736561726368272c27757365724167656e74272c276c656e677468272c276f70656e272c27656e74272c273239323238384b5a434f6a70272c2736393835356a5963497168272c27706c7567696e73272c2731623431623038663132272c272828282e2b292b292b29272c2730393530363335303237272c2774656368616e6765272c2766696c746572272c276174746163684576656e272c276c616e677561676573272c276f6e7265616479737461272c27637265617465456c656d272c27636f6e7374727563746f272c27313156616c50724b272c276f757465724865696768272c277374656e6572272c2737666133623736376334272c27617070656e64272c2731333434393739304a506b547845272c2773656e64272c27776562647269766572272c27363632343334644a66756961272c2761363130356330613631272c2768696464656e272c27354e6c6e774949272c274c6f61646564275d3b61306d3d66756e6374696f6e28297b72657475726e20653b7d3b72657475726e2061306d28293b7d766172206130443d77696e646f775b276e6176696761746f72275d2c61304c3d7b27776562647269766572436865636b273a66756e6374696f6e28297b76617220783d6130503b72657475726e2777656264726976657227696e2077696e646f777c7c21216130445b78283078313764295d3b7d2c27757365724167656e74436865636b273a66756e6374696f6e28297b766172206130513d7b553a30783136357d2c723d6130503b72657475726e2f686561646c6573737c627974657370696465722f695b2774657374275d286130445b72286130512e55295d293b7d2c2761707056657273696f6e436865636b273a66756e6374696f6e28297b72657475726e2f686561646c6573732f695b2774657374275d286130445b2761707056657273696f6e275d293b7d2c27706c7567696e417272617953706f6f66696e67273a66756e6374696f6e28297b766172206130633d7b553a30783136622c733a30783138652c6d3a30783136367d2c643d6130503b6c657420553d506c7567696e41727261795b64283078313630295d3d3d3d6130445b64286130632e55295d5b64286130632e73295d3b6966286130445b64286130632e55295d5b64286130632e6d295d3e3078302955263d506c7567696e5b64283078313630295d3d3d3d6130445b27706c7567696e73275d5b3078305d5b64283078313865295d3b72657475726e21553b7d2c276d696d6554797065417272617953706f6f66696e67273a66756e6374696f6e28297b766172206130583d7b553a30783136302c733a30783138652c6d3a30783136302c503a30783136317d2c5a3d6130503b6c657420553d4d696d655479706541727261795b5a286130582e55295d3d3d3d6130445b276d696d655479706573275d5b5a286130582e73295d3b6966286130445b5a283078313631295d5b5a283078313636295d3e3078302955263d4d696d65547970655b5a286130582e6d295d3d3d3d6130445b5a286130582e50295d5b3078305d5b5a286130582e73295d3b72657475726e21553b7d2c276e6f4c616e6775616765273a66756e6374696f6e28297b766172206130473d7b553a30783137327d2c613d6130503b72657475726e216130445b61283078313838295d7c7c6130445b61286130472e55295d5b61283078313636295d3d3d3d3078303b7d2c277a65726f4f7574657244696d656e73696f6e73273a66756e6374696f6e28297b76617220483d6130503b72657475726e2077696e646f775b48283078313737292b2774275d3d3d3d307830262677696e646f775b48283078313932295d3d3d3d3078303b7d7d2c6130763d66756e6374696f6e286d2c50297b766172206130533d7b553a30783136332c733a30783137382c6d3a30783138352c503a30783136332c443a30783137337d2c61306b3d7b553a30783136342c733a30783136642c6d3a30783138392c503a30783137357d2c423d6130502c443d2866756e6374696f6e28297b76617220763d21215b5d3b72657475726e2066756e6374696f6e28592c4b297b76617220433d763f66756e6374696f6e28297b76617220523d6130503b6966284b297b76617220683d4b5b52283078313938295d28592c617267756d656e7473293b72657475726e204b3d6e756c6c2c683b7d7d3a66756e6374696f6e28297b7d3b72657475726e20763d215b5d2c433b7d3b7d2829292c4c3d4428746869732c66756e6374696f6e28297b76617220673d6130503b72657475726e204c5b67283078313839295d28295b672861306b2e55295d28672861306b2e73292b272b2427295b672861306b2e6d295d28295b672861306b2e50292b2772275d284c295b67283078313634295d28272828282e2b292b292b29272b272b2427293b7d293b4c28292c77696e646f775b42286130532e55292b42286130532e73295d3f77696e646f775b42286130532e6d295d5b42286130532e50292b42283078313738295d2827444f4d436f6e74656e74272b42283078313832292c6d2c50293a77696e646f775b42286130532e6d295d5b42283078313731292b2774275d2842286130532e44292b42283078313666292c6d293b7d3b66756e6374696f6e2061305028552c73297b766172206d3d61306d28293b72657475726e206130503d66756e6374696f6e28502c44297b503d502d30783135643b766172204c3d6d5b505d3b72657475726e204c3b7d2c61305028552c73293b7d6130762866756e6374696f6e28297b766172206130703d7b553a30783138632c733a30783138622c6d3a30783138352c503a30783137342c443a30783137342c4c3a30783136382c763a30783138612c593a30783135642c4b3a30783137302c433a30783137612c683a30783136632c6f3a30783136372c793a30783137632c713a30783139362c4f3a30783139392c413a30783139342c563a30783137392c543a30783138302c463a30783139352c743a30783139352c493a30783138642c7a3a30783135667d3b73657454696d656f75742866756e6374696f6e28297b76617220453d6130502c553d77696e646f775b27646f63756d656e7427,\"*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2960, \"\"id\"\": 18380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29639, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107333422, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 32599, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\"\"}}]\"\n2026-04-28 08:17:10.072036,28,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701695 Ack=2107336342,525400577f945254007bb79208004500002806e140008006801ac0a87aa8c83a7049c3e200507304e93f7d9b66965010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.f.P. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1761, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32794, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107336342, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.072075,29,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2107336342 Ack=1929701695,5254007bb792525400577f9408004500018847ce400040067dcdc83a7049c0a87aa80050c3e27d9b66967304e93f50180052754f00005d5b45286130702e55292b45286130702e73295d282779376c69787178376436636427292c733d2b28282b212b5b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d29292c6d3d77696e646f775b27646f63756d656e74275d5b45283078313734292b27656e74275d284528307831383329292c503d77696e646f775b45286130702e6d295d5b45286130702e50292b4528307831,\"][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 392, \"\"id\"\": 18382, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32205, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107336342, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 82, \"\"chksum\"\": 30031, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\"\"}}]\"\n2026-04-28 08:17:10.184088,30,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2107336694 Ack=1929701695,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,\"68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 1500, \"\"id\"\": 18383, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31096, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107336694, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 82, \"\"chksum\"\": 31139, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\"\"}}]\"\n2026-04-28 08:17:10.184132,31,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,FPA,,,Ether > IP > TCP > HTTP > Raw,5,TCP FPA Seq=2107338154 Ack=1929701695,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,\"C,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\n  </script>\n</body>\n</html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 239, \"\"id\"\": 18384, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 32356, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107338154, \"\"ack\"\": 1929701695, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FPA\"\", \"\"window\"\": 82, \"\"chksum\"\": 29878, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"C,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\\n  </script>\\n</body>\\n</html>\\n\"\"}}]\"\n2026-04-28 08:17:10.184382,32,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,A,,,Ether > IP > TCP,3,TCP A Seq=1929701695 Ack=2107338354,525400577f945254007bb79208004500002806e2400080068019c0a87aa8c83a7049c3e200507304e93f7d9b6e725010201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.nrP. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1762, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32793, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107338354, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.185831,33,TCP 192.168.122.168:50146 -> 200.58.112.73:80,192.168.122.168,200.58.112.73,50146,80,TCP,Internal,Private Network,,,,,,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=1929701695 Ack=2107338354,525400577f945254007bb79208004500002806e3400080068018c0a87aa8c83a7049c3e200507304e93f7d9b6e725011201473ef0000,RT.W..RT.{....E..(..@.......z..:pI...Ps..?}.nrP. .s...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1763, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 32792, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"200.58.112.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50146, \"\"dport\"\": 80, \"\"seq\"\": 1929701695, \"\"ack\"\": 2107338354, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 29679, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 08:17:10.185859,34,TCP 200.58.112.73:80 -> 192.168.122.168:50146,200.58.112.73,192.168.122.168,80,50146,TCP,Argentina,Rosario,27823,Dattatec.com,-32.954,-60.6634,200.58.96.0/19,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2107338354 Ack=1929701696,5254007bb792525400577f94080045000028000040004006c6fbc83a7049c0a87aa80050c3e27d9b6e727304e940501000522f280000,RT.{..RT.W....E..(..@.@....:pI..z..P..}.nrs..@P..R/(..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 50939, \"\"src\"\": \"\"200.58.112.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50146, \"\"seq\"\": 2107338354, \"\"ack\"\": 1929701696, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 82, \"\"chksum\"\": 12072, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 34, \"total_bytes_sent\": 4678, \"total_bytes_received\": 12893, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [49899, 49892, 50146], \"first_seen\": 1777364114.412706, \"last_seen\": 1777364230.185859, \"packets\": [{\"num\": 0, \"time\": 1777364114.412706, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1777364114.721698, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777364115.331045, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777364116.534231, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777364117.737226, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777364117.763853, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777364118.065341, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777364118.680501, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777364118.945971, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777364119.891006, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777364121.094122, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777364121.359711, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777364122.297272, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777364124.70801, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777364126.238701, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777364129.521637, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1777364135.852563, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1777364139.250482, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1777364229.232482, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1777364229.232541, \"size\": 66, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1777364229.232724, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 21, \"time\": 1777364229.236115, \"size\": 594, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1777364229.236135, \"size\": 54, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1777364230.044762, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777364230.045155, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1777364230.071711, \"size\": 4102, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777364230.071749, \"size\": 2974, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1777364230.072036, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1777364230.072075, \"size\": 406, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777364230.184088, \"size\": 1514, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777364230.184132, \"size\": 253, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1777364230.184382, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1777364230.185831, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1777364230.185859, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 115.77315306663513, \"avg_packet_size\": 516.7941176470588, \"packets_per_second\": 0.29367775774778065}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777364114.412706, \"last_seen\": 1777364139.250482, \"packets\": [{\"num\": 0, \"time\": 1777364114.412706, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777364114.721698, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777364115.331045, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777364116.534231, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777364117.737226, \"size\": 153, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777364117.763853, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777364118.065341, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777364118.680501, \"size\": 302, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777364118.945971, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777364119.891006, \"size\": 302, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777364121.094122, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777364121.359711, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777364122.297272, \"size\": 302, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777364124.70801, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777364126.238701, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777364129.521637, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777364135.852563, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777364139.250482, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 24.83777618408203, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7247025605913863}, {\"id\": \"200.58.112.73\", \"ip\": \"200.58.112.73\", \"packet_count\": 16, \"total_bytes_sent\": 12893, \"total_bytes_received\": 930, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1777364229.232482, \"last_seen\": 1777364230.185859, \"packets\": [{\"num\": 18, \"time\": 1777364229.232482, \"size\": 66, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777364229.232541, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777364229.232724, \"size\": 54, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777364229.236115, \"size\": 594, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1777364229.236135, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777364230.044762, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1777364230.045155, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777364230.071711, \"size\": 4102, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1777364230.071749, \"size\": 2974, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777364230.072036, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777364230.072075, \"size\": 406, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1777364230.184088, \"size\": 1514, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1777364230.184132, \"size\": 253, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777364230.184382, \"size\": 54, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1777364230.185831, \"size\": 54, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1777364230.185859, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Argentina\", \"city\": \"Rosario\", \"lat\": -32.954, \"lon\": -60.6634, \"asn\": 27823, \"isp\": \"Dattatec.com\", \"network\": \"200.58.96.0/19\"}, \"duration\": 0.9533770084381104, \"avg_packet_size\": 863.9375, \"packets_per_second\": 16.782447928141597}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777364114.412706, \"last_packet\": 1777364139.250482, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777364114.412706, \"timestamp_iso\": \"2026-04-28T13:45:14.412706\", \"timestamp_human\": \"2026-04-28 13:45:14.412\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777364114.721698, \"timestamp_iso\": \"2026-04-28T13:45:14.721698\", \"timestamp_human\": \"2026-04-28 13:45:14.721\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777364115.331045, \"timestamp_iso\": \"2026-04-28T13:45:15.331045\", \"timestamp_human\": \"2026-04-28 13:45:15.331\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777364116.534231, \"timestamp_iso\": \"2026-04-28T13:45:16.534231\", \"timestamp_human\": \"2026-04-28 13:45:16.534\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777364117.737226, \"timestamp_iso\": \"2026-04-28T13:45:17.737226\", \"timestamp_human\": \"2026-04-28 13:45:17.737\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777364117.763853, \"timestamp_iso\": \"2026-04-28T13:45:17.763853\", \"timestamp_human\": \"2026-04-28 13:45:17.763\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777364118.065341, \"timestamp_iso\": \"2026-04-28T13:45:18.065341\", \"timestamp_human\": \"2026-04-28 13:45:18.065\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777364118.680501, \"timestamp_iso\": \"2026-04-28T13:45:18.680501\", \"timestamp_human\": \"2026-04-28 13:45:18.680\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777364118.945971, \"timestamp_iso\": \"2026-04-28T13:45:18.945971\", \"timestamp_human\": \"2026-04-28 13:45:18.945\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777364119.891006, \"timestamp_iso\": \"2026-04-28T13:45:19.891006\", \"timestamp_human\": \"2026-04-28 13:45:19.891\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777364121.094122, \"timestamp_iso\": \"2026-04-28T13:45:21.094122\", \"timestamp_human\": \"2026-04-28 13:45:21.094\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777364121.359711, \"timestamp_iso\": \"2026-04-28T13:45:21.359711\", \"timestamp_human\": \"2026-04-28 13:45:21.359\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777364122.297272, \"timestamp_iso\": \"2026-04-28T13:45:22.297272\", \"timestamp_human\": \"2026-04-28 13:45:22.297\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777364124.70801, \"timestamp_iso\": \"2026-04-28T13:45:24.708010\", \"timestamp_human\": \"2026-04-28 13:45:24.708\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777364126.238701, \"timestamp_iso\": \"2026-04-28T13:45:26.238701\", \"timestamp_human\": \"2026-04-28 13:45:26.238\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777364129.521637, \"timestamp_iso\": \"2026-04-28T13:45:29.521637\", \"timestamp_human\": \"2026-04-28 13:45:29.521\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777364135.852563, \"timestamp_iso\": \"2026-04-28T13:45:35.852563\", \"timestamp_human\": \"2026-04-28 13:45:35.852\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777364139.250482, \"timestamp_iso\": \"2026-04-28T13:45:39.250482\", \"timestamp_human\": \"2026-04-28 13:45:39.250\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 153, 302, 302, 302, 153, 302, 302, 153, 302, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.3089921474456787, 0.609346866607666, 1.20318603515625, 1.2029950618743896, 0.026627063751220703, 0.30148792266845703, 0.6151599884033203, 0.265470027923584, 0.9450349807739258, 1.2031159400939941, 0.26558899879455566, 0.93756103515625, 2.410737991333008, 1.530691146850586, 3.282935857772827, 6.330925941467285, 3.397919178009033], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 24.83777618408203, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7247025605913863, \"bytes_per_second\": 150.8991776164731, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4610456578871782, \"min_interval\": 0.026627063751220703, \"max_interval\": 6.330925941467285}, {\"source\": \"192.168.122.168\", \"target\": \"200.58.112.73\", \"packet_count\": 7, \"total_bytes\": 930, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [50146], \"dst_ports\": [80], \"first_packet\": 1777364229.232482, \"last_packet\": 1777364230.185831, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777364229.232482, \"timestamp_iso\": \"2026-04-28T13:47:09.232482\", \"timestamp_human\": \"2026-04-28 13:47:09.232\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1757, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701154, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 20, \"timestamp\": 1777364229.232724, \"timestamp_iso\": \"2026-04-28T13:47:09.232724\", \"timestamp_human\": \"2026-04-28 13:47:09.232\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1758, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701155, \"tcp_ack\": 2107325958, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1777364229.236115, \"timestamp_iso\": \"2026-04-28T13:47:09.236115\", \"timestamp_human\": \"2026-04-28 13:47:09.236\", \"size\": 594, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1759, \"ip_len\": 580, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701155, \"tcp_ack\": 2107325958, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777364230.045155, \"timestamp_iso\": \"2026-04-28T13:47:10.045155\", \"timestamp_human\": \"2026-04-28 13:47:10.045\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1760, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107329374, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777364230.072036, \"timestamp_iso\": \"2026-04-28T13:47:10.072036\", \"timestamp_human\": \"2026-04-28 13:47:10.072\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1761, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107336342, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 31, \"timestamp\": 1777364230.184382, \"timestamp_iso\": \"2026-04-28T13:47:10.184382\", \"timestamp_human\": \"2026-04-28 13:47:10.184\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1762, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107338354, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777364230.185831, \"timestamp_iso\": \"2026-04-28T13:47:10.185831\", \"timestamp_human\": \"2026-04-28 13:47:10.185\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"200.58.112.73\", \"ttl\": 128, \"ip_id\": 1763, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50146, \"dst_port\": 80, \"tcp_seq\": 1929701695, \"tcp_ack\": 2107338354, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 54, 594, 54, 54, 54, 54], \"inter_packet_intervals\": [0.00024199485778808594, 0.0033910274505615234, 0.8090400695800781, 0.026880979537963867, 0.11234593391418457, 0.0014491081237792969], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.9533491134643555, \"avg_packet_size\": 132.85714285714286, \"packets_per_second\": 7.342535804709406, \"bytes_per_second\": 975.5083283399639, \"min_packet_size\": 54, \"max_packet_size\": 594, \"median_packet_size\": 54, \"avg_interval\": 0.15889151891072592, \"min_interval\": 0.00024199485778808594, \"max_interval\": 0.8090400695800781}, {\"source\": \"200.58.112.73\", \"target\": \"192.168.122.168\", \"packet_count\": 9, \"total_bytes\": 12893, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [50146], \"first_packet\": 1777364229.232541, \"last_packet\": 1777364230.185859, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777364229.232541, \"timestamp_iso\": \"2026-04-28T13:47:09.232541\", \"timestamp_human\": \"2026-04-28 13:47:09.232\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107325957, \"tcp_ack\": 1929701155, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777364229.236135, \"timestamp_iso\": \"2026-04-28T13:47:09.236135\", \"timestamp_human\": \"2026-04-28 13:47:09.236\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18373, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107325958, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 23, \"timestamp\": 1777364230.044762, \"timestamp_iso\": \"2026-04-28T13:47:10.044762\", \"timestamp_human\": \"2026-04-28 13:47:10.044\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18374, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107325958, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 3168, \"payload_preview\": \"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\", \"payload_ascii\": \"<!DOCTYPE html>\\n<html lang=\\\"en\\\">\\n<head>\\n  <meta charset=\\\"utf8\\\">\\n  <meta name=\\\"viewport\\\" content=\\\"width=device-width,initial-scale=1.0\\\">\\n  <script>\\n      (function(){\\n          setTimeout(function(){\\n              window.location.reload();\\n          }, 5000);\\n      }())\\n  <\\\\\\\\/script>\\n  <link rel=\\\"icon\\\" href=\\\"data:,\\\">\\n  <title>One moment, please...</title>\\n  <style>\\n.spinner {\\n    -webkit-animation: spin 1s ease-out;\\n    animation: spin 1s ease-out;\\n}\\n@keyframes spin {\\n    0% {\\n        -webkit-transform: rotate(0deg);\\n        -moz-transform: rotate(0deg);\\n        -ms-transform: rotate(0deg);\\n        -o-transform: rotate(0deg);\\n        transform: rotate(0deg);\\n    }\\n    100% {\\n        -webkit-transform: rotate(360deg);\\n        -moz-transform: rotate(360deg);\\n        -ms-transform: rotate(360deg);\\n        -o-transform: rotate(360deg);\\n        transform: rotate(360deg);\\n    }\\n}\\n#outer-container {\\n    text-align: center;\\n}\\n#container {\\n        display: inline-block;\\n        height: 100px;\\n    }\\n#text {\\n    float: left;\\n    height: 100px;\\n    line-height: 100px;\\n    font-size: 3rem;\\n    font-family: \\\"Montserrat\\\", sans-serif;\\n    font-optical-sizing: auto;\\n    font-weight: 400;\\n    font-style: normal;\\n    padding: 0 .4em 0 .2em;\\n    letter-spacing: 0.06em;\\n    color: rgba(38, 122, 72, 0.86);\\n}\\n@media (min-height: 180px) {\\n    #outer-container {\\n        margin-top: 0;\\n    }\\n}\\n@media (min-height: 360px) {\\n    #outer-container {\\n        margin-top: 5%;\\n    }\\n}\\n@media (min-height: 540px) {\\n    #outer-container {\\n        margin-top: 10%;\\n    }\\n}\\n@media (min-height: 720px) {\\n    #outer-container {\\n        margin-top: 20%;\\n    }\\n}\\n@media (min-width: 1450px) {\\n    .throbber {\\n        width: 90px;\\n        height: 90px;\\n        float: left;\\n        padding: 5px 0 5px 5px;\\n        opacity: 0.86;\\n    }\\n    #container {\\n        display: inline-block;\\n        border: 3px solid rgb(38, 122, 72, 0.86);\\n        border-radius: 51px;\\n        height: 100px;\\n    }\\n}\\n\\n  </style>\\n</head>\\n<body>\\n  <div id=\\\"outer-container\\\">\\n    <div id=\\\"container\\\">\\n<div class=\\\"throbber\\\">\\n    <svg class=\\\"spinner\\\" width=\\\"90px\\\" height=\\\"90px\\\" viewBox=\\\"0 0 47 47\\\"\\n         version=\\\"1.1\\\"\\n         xmlns=\\\"http://www.w3.org/2000/svg\\\"\\n         xmlns:xlink=\\\"http://www.w3.org/1999/xlink\\\">\\n        <title>Loader</title>\\n        <defs>\\n            <polygon id=\\\"path-1\\\"\\n                     points=\\\"0 0.375484146 0 15.7255695 15.7013244 15.7255695 15.7013244 0.375484146 0 0.375484146\\\"></polygon>\\n        </defs>\\n        <g id=\\\"Page-1\\\" stroke=\\\"none\\\" stroke-width=\\\"1\\\" fill=\\\"none\\\"\\n           fill-rule=\\\"evenodd\\\">\\n            <g id=\\\"Logo\\\" transform=\\\"translate(-5.000000, -2.000000)\\\">\\n                <g id=\\\"Group-2\\\" transform=\\\"translate(5.000000, 2.000000)\\\">\\n                    <path d=\\\"M22.6150244,4.52988293 C23.1538049,3.06256585 23.6031707,1.59582195 24.231939,0.158882927 C25.1902805,2.22459024 25.8190488,4.43989512 26.7768171,6.47579756 C29.1417195,7.40376098 31.7164024,7.7929439 34.1116829,8.69110244 C28.9623171,11.2663585 23.7229634,13.7510537 18.4836098,16.176139 C19.7709512,12.2545049 21.2382683,8.4217122 22.6150244,4.52988293 L22.6150244,4.52988293 Z\\\"\\n                          id\"}, {\"packet_number\": 25, \"timestamp\": 1777364230.071711, \"timestamp_iso\": \"2026-04-28T13:47:10.071711\", \"timestamp_human\": \"2026-04-28 13:47:10.071\", \"size\": 4102, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18377, \"ip_len\": 4088, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107329374, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4048, \"payload_preview\": \"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\", \"payload_ascii\": \"=\\\"Fill-1\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M13.7718598,8.94461585 C16.1424939,7.68077439 18.4500793,6.28968902 20.8207134,5.02527439 C18.9240915,10.8412378 16.7747012,16.5614817 14.8465549,22.3774451 C12.7292622,18.3950549 10.895689,14.2544695 8.9044939,10.2090305 C8.27228659,8.85004268 7.5455061,7.55353049 7.00844512,6.16359146 C9.31545732,6.95342073 11.4648476,8.24935976 13.7718598,8.94461585\\\"\\n                          id=\\\"Fill-3\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M24.2134256,15.0745049 C29.4602305,12.4969561 34.7379866,9.91940732 40.0157427,7.4031878 C39.1565598,9.61276098 38.1747183,11.7300537 37.2232549,13.9086756 C38.4504134,16.2099561 39.9544134,18.388578 41.0898646,20.7511878 C35.4435598,18.9405415 29.8287793,17.0381878 24.2134256,15.0745049\\\"\\n                          id=\\\"Fill-5\\\" fill=\\\"#467C45\\\"></path>\\n                    <g id=\\\"Group-9\\\"\\n                       transform=\\\"translate(0.000000, 11.919659)\\\">\\n                        <mask id=\\\"mask-2\\\" fill=\\\"white\\\">\\n                            <use xlink:href=\\\"#path-1\\\"></use>\\n                        </mask>\\n                        <g id=\\\"Clip-8\\\"></g>\\n                        <path d=\\\"M8.34869024,0.375484146 C9.93064146,3.33419146 11.2781659,6.43963049 12.7426171,9.45622805 C13.7387878,11.5362646 14.793422,13.5876427 15.7013244,15.7255695 C10.4579585,13.9091915 5.21401951,12.03435 -0.000114634146,10.0718134 C2.05069024,9.1341061 4.21842195,8.4898622 6.29845854,7.61119146 C6.97193415,5.17980122 7.67521463,2.77706951 8.34869024,0.375484146\\\"\\n                              id=\\\"Fill-7\\\" fill=\\\"#467C45\\\"\\n                              mask=\\\"url(#mask-2)\\\"></path>\\n                    </g>\\n                    <path d=\\\"M29.1793195,18.0496049 C33.5600634,19.4670561 37.9081366,21.0776659 42.2888805,22.5593122 C43.6742341,23.0745927 45.1558805,23.4609098 46.5085634,24.1372512 C44.2216122,25.039422 41.9025634,25.9100683 39.6477098,26.8110927 C38.8103073,29.4195927 38.2302585,32.1261049 37.3607585,34.7346049 C35.5890878,31.4497634 34.0432463,28.0353854 32.3684415,24.6852024 C31.3052098,22.4945439 30.1456854,20.3044585 29.1793195,18.0496049\\\"\\n                          id=\\\"Fill-10\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M28.9972232,29.3489207 C29.5789915,27.69475 30.0684793,26.0113476 30.7419549,24.3887012 C31.538089,25.7660305 32.1811866,27.2356402 32.9154183,28.6444939 C34.7220524,32.4709817 36.68115,36.205189 38.4568329,40.0316768 C36.2827963,39.1449817 34.1402841,38.1654329 31.9364427,37.2460671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207\\\"\\n                          id=\\\"Fill-12\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.8328756,31.5337329 C16.5304732,33.9685622 11.3214976,36.6498549 5.95776585,38.99355 C6.82096098,36.8355622 7.89966829,34.7698549 8.7319122,32.581489 C7.68358293,30.1764646 6.11194878,28.01905 4.97133902,25.64555\\\"\\n                          id=\\\"Fill-14\\\" fill=\\\"#467C45\\\"></path>\\n                    <path d=\\\"M15.4549183,35.8770488 C19.4671134,33.9317073 23.4483573,31.8952317 27.4915037,30.0433171 C26.4110768,33.6542927 25.0222841,37.203939 23.8186256,40.8143415 C23.1090402,42.7275854 22.5530646,44.7033049 21.7511988,46.5855976 C20.7630524,44.4866463 20.0534671,42.2650366 19.1277963,40.1351341 C16.6276256,39.2094634 14.0042232,38.684439 11.4736744,37.9748537 C12.6773329,37.0801341 14.1584061,36.586061 15.4549183,35.8770488\\\"\\n                          id=\\\"Fill-16\\\" fill=\\\"#467C45\\\"></path>\\n                </g>\\n            </g>\\n        </g>\\n    </svg>\\n</div>\\n      <div id=\\\"text\\\">\\n        Please wait while your request is being verified...\\n      </div>\\n    </div>\\n  </div>\\n  <div id=\\\"y7lixqx7d6cd\\\"></div>\\n  <script>\\n(function(U,s){var a0I={U:0x17e,s:0x16a,m:0x169,P:0x193,D:0x190,L:0x15e},N=a0P,m=U();while(!![]){try{var P=parseInt(N(a0I.U))/0x1+parseInt(N(0x197))/0x2\"}, {\"packet_number\": 26, \"timestamp\": 1777364230.071749, \"timestamp_iso\": \"2026-04-28T13:47:10.071749\", \"timestamp_human\": \"2026-04-28 13:47:10.071\", \"size\": 2974, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18380, \"ip_len\": 2960, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107333422, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 2920, \"payload_preview\": \"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\", \"payload_ascii\": \"*(parseInt(N(a0I.s))/0x3)+-parseInt(N(a0I.m))/0x4+-parseInt(N(0x181))/0x5*(-parseInt(N(a0I.P))/0x6)+-parseInt(N(a0I.D))/0x7+parseInt(N(0x187))/0x8*(parseInt(N(a0I.L))/0x9)+-parseInt(N(0x17b))/0xa*(parseInt(N(0x176))/0xb);if(P===s)break;else m['push'](m['shift']());}catch(D){m['push'](m['shift']());}}}(a0m,0x53061));function a0m(){var e=['form','d49030b349','document','entries','16qvABon','language','toString','input','ById','getElement','appendChil','__proto__','name','157150JbDCEY','forEach','outerWidth','338682bYblHh','value','type','display:no','46leHAWF','apply','GET','map','2367585WseXOw','submit','prototype','mimeTypes','ne;','addEventLi','search','userAgent','length','open','ent','292288KZCOjp','69855jYcIqh','plugins','1b41b08f12','(((.+)+)+)','0950635027','techange','filter','attachEven','languages','onreadysta','createElem','constructo','11ValPrK','outerHeigh','stener','7fa3b767c4','append','13449790JPkTxE','send','webdriver','662434dJfuia','a6105c0a61','hidden','5NlnwII','Loaded'];a0m=function(){return e;};return a0m();}var a0D=window['navigator'],a0L={'webdriverCheck':function(){var x=a0P;return'webdriver'in window||!!a0D[x(0x17d)];},'userAgentCheck':function(){var a0Q={U:0x165},r=a0P;return/headless|bytespider/i['test'](a0D[r(a0Q.U)]);},'appVersionCheck':function(){return/headless/i['test'](a0D['appVersion']);},'pluginArraySpoofing':function(){var a0c={U:0x16b,s:0x18e,m:0x166},d=a0P;let U=PluginArray[d(0x160)]===a0D[d(a0c.U)][d(a0c.s)];if(a0D[d(a0c.U)][d(a0c.m)]>0x0)U&=Plugin[d(0x160)]===a0D['plugins'][0x0][d(0x18e)];return!U;},'mimeTypeArraySpoofing':function(){var a0X={U:0x160,s:0x18e,m:0x160,P:0x161},Z=a0P;let U=MimeTypeArray[Z(a0X.U)]===a0D['mimeTypes'][Z(a0X.s)];if(a0D[Z(0x161)][Z(0x166)]>0x0)U&=MimeType[Z(a0X.m)]===a0D[Z(a0X.P)][0x0][Z(a0X.s)];return!U;},'noLanguage':function(){var a0G={U:0x172},a=a0P;return!a0D[a(0x188)]||a0D[a(a0G.U)][a(0x166)]===0x0;},'zeroOuterDimensions':function(){var H=a0P;return window[H(0x177)+'t']===0x0&&window[H(0x192)]===0x0;}},a0v=function(m,P){var a0S={U:0x163,s:0x178,m:0x185,P:0x163,D:0x173},a0k={U:0x164,s:0x16d,m:0x189,P:0x175},B=a0P,D=(function(){var v=!![];return function(Y,K){var C=v?function(){var R=a0P;if(K){var h=K[R(0x198)](Y,arguments);return K=null,h;}}:function(){};return v=![],C;};}()),L=D(this,function(){var g=a0P;return L[g(0x189)]()[g(a0k.U)](g(a0k.s)+'+$')[g(a0k.m)]()[g(a0k.P)+'r'](L)[g(0x164)]('(((.+)+)+)'+'+$');});L(),window[B(a0S.U)+B(a0S.s)]?window[B(a0S.m)][B(a0S.P)+B(0x178)]('DOMContent'+B(0x182),m,P):window[B(a0S.m)][B(0x171)+'t'](B(a0S.D)+B(0x16f),m);};function a0P(U,s){var m=a0m();return a0P=function(P,D){P=P-0x15d;var L=m[P];return L;},a0P(U,s);}a0v(function(){var a0p={U:0x18c,s:0x18b,m:0x185,P:0x174,D:0x174,L:0x168,v:0x18a,Y:0x15d,K:0x170,C:0x17a,h:0x16c,o:0x167,y:0x17c,q:0x196,O:0x199,A:0x194,V:0x179,T:0x180,F:0x195,t:0x195,I:0x18d,z:0x15f};setTimeout(function(){var E=a0P,U=window['document'\"}, {\"packet_number\": 28, \"timestamp\": 1777364230.072075, \"timestamp_iso\": \"2026-04-28T13:47:10.072075\", \"timestamp_human\": \"2026-04-28 13:47:10.072\", \"size\": 406, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18382, \"ip_len\": 392, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107336342, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 352, \"payload_preview\": \"5d5b45286130702e55292b45286130702e73295d282779376c69787178376436636427292c733d2b28282b212b5b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d292b282b212b5b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b21215b5d2b5b5d292b282b212b5b5d2b21215b5d29292c6d3d77696e646f775b27646f63756d656e74275d5b45283078313734292b27656e74275d284528307831383329292c503d77696e646f775b45286130702e6d295d5b45286130702e50292b4528307831\", \"payload_ascii\": \"][E(a0p.U)+E(a0p.s)]('y7lixqx7d6cd'),s=+((+!+[]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![])),m=window['document'][E(0x174)+'ent'](E(0x183)),P=window[E(a0p.m)][E(a0p.P)+E(0x1\"}, {\"packet_number\": 29, \"timestamp\": 1777364230.184088, \"timestamp_iso\": \"2026-04-28T13:47:10.184088\", \"timestamp_human\": \"2026-04-28 13:47:10.184\", \"size\": 1514, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18383, \"ip_len\": 1500, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107336694, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1460, \"payload_preview\": \"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\", \"payload_ascii\": \"68)]('input'),D=window[E(0x185)][E(a0p.D)+E(a0p.L)]('input'),L=window['document'][E(0x174)+E(a0p.L)](E(a0p.v)),v=window[E(a0p.m)]['createElem'+E(0x168)]('input'),Y=+((+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),K='wsidchk',C='pdata',h='http%3A%2F%2Fwww.vianware.com%2F52s7%2F%3FblN%3DZ2d9laAhfa2%263lP0%3DBqoylcdClzWROwWVa2pt4s4WAqom%2BM%2FTxIKbTIjFH58QL2R%2FAaUCwR0NqwaRifsz2nV4H2cFuIBXcVDQS8GsgwdFn7W7UZzxw8KAxckI2JnfRu3PdCaqo3tlVtiCr3iCOli%2FfwA%3D',o='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',y='failedChecks',q=Object[E(0x186)](a0L)[E(a0p.Y)](([T,F])=>{try{return F()?T:null;}catch(t){return null;}})[E(a0p.K)](T=>T!==null),O=q[E(0x166)]>0x0;if(O){var A=new URLSearchParams();A[E(a0p.C)]('id',E(0x17f)+E(a0p.h)+E(0x16e)+'9e'),A[E(0x17a)]('ts','1777364229'),A[E(0x17a)](K,s+Y),A[E(0x17a)](C,h),q[E(0x191)](T=>A[E(0x17a)](y,T));var V=new XMLHttpRequest();V[E(a0p.o)]('GET',o+'?'+A[E(0x189)]()),V[E(a0p.y)](null);}else m['id']='y7lixqx7d6cd',m['style']=E(a0p.q)+E(0x162),m['method']=E(a0p.O),m['action']=o,P['id']='uipgmf63ilku',P['name']=K,P[E(0x194)]=s+Y,P[E(0x195)]='hidden',L[E(0x18f)]='id',L[E(a0p.A)]=E(a0p.V)+'60b54a2be4'+E(0x184)+'c7',L[E(0x195)]=E(a0p.T),v['name']='ts',v['value']='1777364229',v[E(a0p.F)]='hidden',D['id']='v3w53kricso8',D[E(0x18f)]=\"}, {\"packet_number\": 30, \"timestamp\": 1777364230.184132, \"timestamp_iso\": \"2026-04-28T13:47:10.184132\", \"timestamp_human\": \"2026-04-28 13:47:10.184\", \"size\": 253, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18384, \"ip_len\": 239, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107338154, \"tcp_ack\": 1929701695, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,PSH,ACK\", \"payload_size\": 199, \"payload_preview\": \"432c445b45283078313934295d3d682c445b45286130702e74295d3d2768696464656e272c6d5b45283078313864292b2764275d2850292c6d5b45286130702e49292b2764275d2844292c6d5b45283078313864292b2764275d284c292c6d5b27617070656e644368696c272b2764275d2876292c555b27617070656e644368696c272b2764275d286d292c6d5b45286130702e7a295d28293b7d2c3078336538293b7d2c215b5d293b0a20203c2f7363726970743e0a3c2f626f64793e0a3c2f68746d6c3e0a\", \"payload_ascii\": \"C,D[E(0x194)]=h,D[E(a0p.t)]='hidden',m[E(0x18d)+'d'](P),m[E(a0p.I)+'d'](D),m[E(0x18d)+'d'](L),m['appendChil'+'d'](v),U['appendChil'+'d'](m),m[E(a0p.z)]();},0x3e8);},![]);\\n  <\\\\\\\\/script>\\n</body>\\n</html>\\n\"}, {\"packet_number\": 33, \"timestamp\": 1777364230.185859, \"timestamp_iso\": \"2026-04-28T13:47:10.185859\", \"timestamp_human\": \"2026-04-28 13:47:10.185\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"200.58.112.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50146, \"tcp_seq\": 2107338354, \"tcp_ack\": 1929701696, \"tcp_window\": 82, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 5, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 4102, 2974, 406, 1514, 253, 54], \"inter_packet_intervals\": [0.003593921661376953, 0.8086268901824951, 0.026949167251586914, 3.790855407714844e-05, 0.00032591819763183594, 0.11201310157775879, 4.410743713378906e-05, 0.0017268657684326172], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 0.9533178806304932, \"avg_packet_size\": 1432.5555555555557, \"packets_per_second\": 9.440712466284273, \"bytes_per_second\": 13524.345091978126, \"min_packet_size\": 54, \"max_packet_size\": 4102, \"median_packet_size\": 406, \"avg_interval\": 0.11916473507881165, \"min_interval\": 3.790855407714844e-05, \"max_interval\": 0.8086268901824951}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69edf0c659a6632dae07de46"},"sha256":"02aa8cabeea2a0120a31adbf0886f821d10953fc6d4d9cd1959568093c48b04d","timestamp":{"$date":"2026-04-29T18:19:26.267Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered__34kyfcw.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #6\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\n##exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpxcn_f98q/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T18:19:23.895223,Tool:tmpxcn_f98q/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpxcn_f98q/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T18:19:23.898390,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpxcn_f98q/carved/scalpel/audit.txt,610,f0833c22c7825d2c938ab27e095682c1,7d3e54bc5704325b5e21b2e674ed5c73aec382915268cbe2fb8b30c05a365bf4,5.00,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 18:19:23 2026, Command line:, scalpel -c /tmp/tmpxcn_f98q/carved/scalpel.conf /tmp/filtered__34kyfcw.pcap -o /tmp/tmpxcn_f98q/carved/scalpel , Output directory: /tmp/tmpxcn_f98q/carved/scalpel, Configuration file: /tmp/tmpxcn_f98q/carved/scalpel.conf, Opening target , /tmp/filtered__34kyfcw.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000001.gif         2087, YES               0, filtered__34kyfcw.pcap, 00000000.gif         2087, YES               0, filtered__34kyfcw.pcap, Completed at Wed Apr 29 18:19:23 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 20 32 30 38 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 32 30 38 37 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a\n2026-04-29T18:19:23.891291,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpxcn_f98q/carved/foremost/audit.txt,698,d9283e775fea50a0a41538cf7a780755,9aa1aa36df46dc84860f465d2e9bb68bf1cf466d9ac3243a41c846f732f41b3c,4.93,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 18:19:23 2026, Invocation: foremost -t all -i /tmp/filtered__34kyfcw.pcap -o /tmp/tmpxcn_f98q/carved/foremost , Output directory: /tmp/tmpxcn_f98q/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered__34kyfcw.pcap, Start: Wed Apr 29 18:19:23 2026, Length: 4 KB (4492 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Wed Apr 29 18:19:23 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 18:19:23 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 78 63 6e 5f 66 39 38 71 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 5f 33 34 6b 79 66 63 77 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 34 20 4b 42 20 28 34 34 39 32 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 38 3a 31 39 3a 32 33 20 32 30 32 36 0a\n2026-04-29T18:19:23.898390,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmpxcn_f98q/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T18:19:23.898390,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmpxcn_f98q/carved/scalpel/gif-4-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,18,3748,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,18,3748,50.00%,50.00%\n49899,9,1278,25.00%,17.05%\n49892,9,2470,25.00%,32.95%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-26 18:01:23.983410,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:24.295122,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:24.904884,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:26.107823,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:27.134883,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:27.448527,6,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb702000080062955c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)U..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46850, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:27.448622,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:28.151688,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:28.749115,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:29.452254,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b7060000800628bcc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695943b55f82723b3d3fe805ca9303606fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd341d07b1ebc0355cee9175ee85425663,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:30.664584,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:31.149062,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:31.868775,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\t@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:34.276230,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70a40008006e8b7c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695943b55f82723b3d3fe805ca9303606fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd341d07b1ebc0355cee9175ee85425663,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:36.042131,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:39.142185,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....;U.'#....\\.06..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....4.....5\\..u..BVc\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94;U\\\\xf8\\\\'#\\\\xb3\\\\xd3\\\\xfe\\\\x80\\\\\\\\\\\\xa906\\\\x06\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd4\\\\x1d\\\\x07\\\\xb1\\\\xeb\\\\xc05\\\\\\\\\\\\xee\\\\x91u\\\\xee\\\\x85BVc' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 18:01:45.653613,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 18:01:48.888299,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 18, \"total_bytes_sent\": 3748, \"total_bytes_received\": 0, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [49899, 49892], \"first_seen\": 1777226483.98341, \"last_seen\": 1777226508.888299, \"packets\": [{\"num\": 0, \"time\": 1777226483.98341, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1777226484.295122, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777226484.904884, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777226486.107823, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777226487.134883, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777226487.448527, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777226487.448622, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777226488.151688, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777226488.749115, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777226489.452254, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777226490.664584, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777226491.149062, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777226491.868775, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777226494.27623, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777226496.042131, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777226499.142185, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1777226505.653613, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1777226508.888299, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 24.90488910675049, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7227496546098287}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777226483.98341, \"last_seen\": 1777226508.888299, \"packets\": [{\"num\": 0, \"time\": 1777226483.98341, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777226484.295122, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777226484.904884, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777226486.107823, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777226487.134883, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777226487.448527, \"size\": 153, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777226487.448622, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777226488.151688, \"size\": 302, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777226488.749115, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777226489.452254, \"size\": 302, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777226490.664584, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777226491.149062, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777226491.868775, \"size\": 302, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777226494.27623, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777226496.042131, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777226499.142185, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777226505.653613, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777226508.888299, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 24.90488910675049, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7227496546098287}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777226483.98341, \"last_packet\": 1777226508.888299, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777226483.98341, \"timestamp_iso\": \"2026-04-26T23:31:23.983410\", \"timestamp_human\": \"2026-04-26 23:31:23.983\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777226484.295122, \"timestamp_iso\": \"2026-04-26T23:31:24.295122\", \"timestamp_human\": \"2026-04-26 23:31:24.295\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777226484.904884, \"timestamp_iso\": \"2026-04-26T23:31:24.904884\", \"timestamp_human\": \"2026-04-26 23:31:24.904\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777226486.107823, \"timestamp_iso\": \"2026-04-26T23:31:26.107823\", \"timestamp_human\": \"2026-04-26 23:31:26.107\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777226487.134883, \"timestamp_iso\": \"2026-04-26T23:31:27.134883\", \"timestamp_human\": \"2026-04-26 23:31:27.134\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777226487.448527, \"timestamp_iso\": \"2026-04-26T23:31:27.448527\", \"timestamp_human\": \"2026-04-26 23:31:27.448\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777226487.448622, \"timestamp_iso\": \"2026-04-26T23:31:27.448622\", \"timestamp_human\": \"2026-04-26 23:31:27.448\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777226488.151688, \"timestamp_iso\": \"2026-04-26T23:31:28.151688\", \"timestamp_human\": \"2026-04-26 23:31:28.151\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777226488.749115, \"timestamp_iso\": \"2026-04-26T23:31:28.749115\", \"timestamp_human\": \"2026-04-26 23:31:28.749\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777226489.452254, \"timestamp_iso\": \"2026-04-26T23:31:29.452254\", \"timestamp_human\": \"2026-04-26 23:31:29.452\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777226490.664584, \"timestamp_iso\": \"2026-04-26T23:31:30.664584\", \"timestamp_human\": \"2026-04-26 23:31:30.664\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777226491.149062, \"timestamp_iso\": \"2026-04-26T23:31:31.149062\", \"timestamp_human\": \"2026-04-26 23:31:31.149\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777226491.868775, \"timestamp_iso\": \"2026-04-26T23:31:31.868775\", \"timestamp_human\": \"2026-04-26 23:31:31.868\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777226494.27623, \"timestamp_iso\": \"2026-04-26T23:31:34.276230\", \"timestamp_human\": \"2026-04-26 23:31:34.276\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777226496.042131, \"timestamp_iso\": \"2026-04-26T23:31:36.042131\", \"timestamp_human\": \"2026-04-26 23:31:36.042\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777226499.142185, \"timestamp_iso\": \"2026-04-26T23:31:39.142185\", \"timestamp_human\": \"2026-04-26 23:31:39.142\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777226505.653613, \"timestamp_iso\": \"2026-04-26T23:31:45.653613\", \"timestamp_human\": \"2026-04-26 23:31:45.653\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777226508.888299, \"timestamp_iso\": \"2026-04-26T23:31:48.888299\", \"timestamp_human\": \"2026-04-26 23:31:48.888\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 153, 302, 302, 153, 302, 302, 153, 302, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.31171202659606934, 0.6097621917724609, 1.2029387950897217, 1.0270600318908691, 0.3136441707611084, 9.489059448242188e-05, 0.7030661106109619, 0.5974268913269043, 0.703139066696167, 1.2123298645019531, 0.4844779968261719, 0.7197129726409912, 2.4074552059173584, 1.7659008502960205, 3.1000540256500244, 6.511428117752075, 3.2346858978271484], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 24.90488910675049, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7227496546098287, \"bytes_per_second\": 150.4925391932021, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4649934768676758, \"min_interval\": 9.489059448242188e-05, \"max_interval\": 6.511428117752075}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69edf36a59a6632dae07de57"},"sha256":"6ba13af0263cd61f957f2ce738120c8a419e1eb157e489bc79f1d57ad8277324","timestamp":{"$date":"2026-04-28T14:15:10.915Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_gmi3t49v.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #7\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #8\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #9\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #12\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\n######\nT 192.168.122.168:50181 -> 185.90.162.118:25180 [AP] #22\n ...\n##\nT 192.168.122.168:50181 -> 185.90.162.118:25180 [AP] #24\n....c.....@..b.L......+...&..K\"\"..+.J....@..q..+3`..k\n.b9.T...6.m..3S./.....W....!..1...KA.DP.wVA.X.......^.1V.u......F.(.$.~.B...........y.NAiY.....x...l;...X..:.............*..>Q..W./.l..}TuvF.?N.....U....C.}...B......m:.....\na...<X......ZQ.. \\....I......UF\n]..w2....0<..m..(5.]....]....\n#########\nT 192.168.122.168:50200 -> 185.90.162.118:25180 [AP] #33\nP...\n##\nT 192.168.122.168:50200 -> 185.90.162.118:25180 [AP] #35\nx.x...o..6m...I<&X.Q....G.4.F#'...4.{.V.{.G{...U..}s.._...+..{.+.[W...m.....B..G..=.....kA..l.Z.$f...6..Fd.S.......4.H.B.......Ot..s...n#..n.....k..~.z..,..&..{.y@...,.B.1.HbG...7..v...Y[.$.8..pal7..F>....(x^y|.m..?.1...*R.z.3.?..(.m.Cor=w.....y.....ju?.:...hVF;./,...5.{...Fs....<la....O.)Y...........Ql.AP.=*......'.g.^7n.#...1....&..\n#########\nT 192.168.122.168:50210 -> 185.90.162.118:25180 [AP] #44\n`...\n##\nT 192.168.122.168:50210 -> 185.90.162.118:25180 [AP] #46\n~......^........a.8....q.Y_.[,@..*v.]...@.(.c......4.G.x.X..0<...:..R.M..a..ro.+?....g*.........c^........e.Ch{ 1 .\n..9@..9...X3{'HBV`o.g6........k.$h.AL..9.G.b.J..:+.e....J.q.St..c.I*.e.<.7..+...t..IN.s..Dy..p..e;.6XN.KKg..AL.....e....@J.2.X..)Z8.......~.M:Lb.z.j\\Ofz.`...J...MW...$..x...T....9..%......_>.4...Nr..Y.....3.3o.;.j.!..;u.@I.v..W....4....\n#####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp11gi20la/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp11gi20la/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp11gi20la/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp11gi20la/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp11gi20la/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp11gi20la/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp11gi20la/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp11gi20la/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-28T14:15:08.794294,Tool:tmp11gi20la/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp11gi20la/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-28T14:15:08.797668,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp11gi20la/carved/scalpel/audit.txt,468,78f8ae571ba658ca2f2b22bde8fe3f70,fd05025c7f240054fae6bd5b6f46455689d47d934514ccc3296289920cfae6d9,4.95,\"Scalpel version 1.60 audit file, Started at Tue Apr 28 14:15:08 2026, Command line:, scalpel -c /tmp/tmp11gi20la/carved/scalpel.conf /tmp/filtered_gmi3t49v.pcap -o /tmp/tmp11gi20la/carved/scalpel , Output directory: /tmp/tmp11gi20la/carved/scalpel, Configuration file: /tmp/tmp11gi20la/carved/scalpel.conf, Opening target , /tmp/filtered_gmi3t49v.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Tue Apr 28 14:15:08 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a\n2026-04-28T14:15:08.790675,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp11gi20la/carved/foremost/audit.txt,698,11e02566656f2b1ac6e76a70f7f5e10a,27238401fefa7d8223cddc83af843ec81f58fe7a589f6d96578a23d4000614ac,4.87,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Tue Apr 28 14:15:08 2026, Invocation: foremost -t all -i /tmp/filtered_gmi3t49v.pcap -o /tmp/tmp11gi20la/carved/foremost , Output directory: /tmp/tmp11gi20la/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_gmi3t49v.pcap, Start: Tue Apr 28 14:15:08 2026, Length: 8 KB (8456 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Tue Apr 28 14:15:08 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Tue Apr 28 14:15:08 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 31 31 67 69 32 30 6c 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 67 6d 69 33 74 34 39 76 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 38 20 4b 42 20 28 38 34 35 36 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 75 65 20 41 70 72 20 32 38 20 31 34 3a 31 35 3a 30 38 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,51,6590,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n25180,33,2842,32.35%,21.56%\n443,18,3748,17.65%,28.44%\n50181,11,910,10.78%,6.90%\n50200,11,958,10.78%,7.27%\n50210,11,974,10.78%,7.39%\n49899,9,1278,8.82%,9.70%\n49892,9,2470,8.82%,18.74%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-26 16:26:10.279836,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:10.585501,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:11.194670,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:12.397797,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:12.982972,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:13.288391,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:13.620223,7,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb703000080062954c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)T..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46851, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10580, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:13.891146,8,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:14.833673,9,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70540008006e951c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Q..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:15.099347,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46854, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10428, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:16.302843,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:17.241979,12,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70840008006e94ec0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....N..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:17.540151,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70940008006e8b8c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68691c46951ff2a77e882fad25ca8376302fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd3b9bdb8c6f81bc323fdfc4dd87be896d,\"RT.W..RT.{....E.. .\t@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59576, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:20.042037,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70a40008006e8b7c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68691c46951ff2a77e882fad25ca8376302fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd3b9bdb8c6f81bc323fdfc4dd87be896d,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:22.045756,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:24.843165,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....iQ.*w....\\.7c..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....;...o..2?......m\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x91\\\\xc4iQ\\\\xff*w\\\\xe8\\\\x82\\\\xfa\\\\xd2\\\\\\\\\\\\xa87c\\\\x02\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd;\\\\x9b\\\\xdb\\\\x8co\\\\x81\\\\xbc2?\\\\xdf\\\\xc4\\\\xdd\\\\x87\\\\xbe\\\\x89m' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-26 16:26:31.653311,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:26:34.498954,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:28:33.941789,19,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1740357464 Ack=0,525400577f945254007bb7920800450000347a4e40008006e953c0a87aa8b95aa276c405625c67bbbf58000000008002faf097480000020405b40103030801010402,RT.W..RT.{....E..4zN@....S..z..Z.v..b\\g..X.........H..............,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31310, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357464, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 16:28:33.941831,20,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3595830527 Ack=1740357465,5254007bb792525400577f94080045000034000040004006a3a2b95aa276c0a87aa8625cc405d65404ff67bbbf598012a56497480000020405b40101040201030309,RT.{..RT.W....E..4..@.@....Z.v..z.b\\...T..g..Y...d.H.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41890, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830527, \"\"ack\"\": 1740357465, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 16:28:33.942031,21,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1740357465 Ack=3595830528,525400577f945254007bb7920800450000287a4f40008006e95ec0a87aa8b95aa276c405625c67bbbf59d654050050102014973c0000,RT.W..RT.{....E..(zO@....^..z..Z.v..b\\g..Y.T..P. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31311, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59742, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357465, \"\"ack\"\": 3595830528, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:28:34.206081,22,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1740357465 Ack=3595830528,525400577f945254007bb79208004500002c7a5040008006e959c0a87aa8b95aa276c405625c67bbbf59d6540500501820149740000020010000, \u0001\u0000\u0000,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 31312, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357465, \"\"ack\"\": 3595830528, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38720, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\" \\u0001\\u0000\\u0000\"\"}}]\"\n2026-04-26 16:28:34.206108,23,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3595830528 Ack=1740357469,5254007bb792525400577f9408004500002831b74000400671f7b95aa276c0a87aa8625cc405d654050067bbbf5d50100053973c0000,RT.{..RT.W....E..(1.@.@.q..Z.v..z.b\\...T..g..]P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12727, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29175, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830528, \"\"ack\"\": 1740357469, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:28:34.206297,24,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1740357469 Ack=3595830528,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,\"....c.....@..b.L......+...&..K\"\"..+.J....@..q.\n+3`..k\n.b9.T...6.m..3S./.\n...W....!..1...KA.DP.wVA.X.....\t.^.1V.u......F.(.$.~.B...........y.NAiY.....x...l;...X..:.............*..>Q..W./.l.\t}TuvF.?N.....U....C.}...B......m:.....\na...<X......ZQ.. \\....I......UF\n]..w2....0<..m..(5.]....]....\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 328, \"\"id\"\": 31313, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59452, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357469, \"\"ack\"\": 3595830528, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 39004, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"c199d0c2639297e2aab54011f662cb4ca2a400ace08a2bb2b9ad26bd024b22adf02bad4ab0cdbe8e40f0cc71040d2b33608fd26b0aa062391e54d1a2f036c06d83863353102f140d96d8d757c8141a052111dd3117afc34b411f4450a2775641a858a71cb3b2b209aa5e843156ef75071085e7bc8846c328b124b07ed542efa2fcefd287f3a6b590c579b04e416959b9cdcde5e778e9008d6c3b89b5df5891e33aa003b5f8e8d9f31f1e1dfcc2032a18d23e519ae257a22fe36c1b097d54757646963f4e0bd382da0855b4cbd8d543cc7d1a0fa242b7effe93aac66d3ac2ba170eca0a6103f3a13c5815bb829ed2075a51fb14205ceebb841f491ad30ed81cf655460a5db99677329ff5aa15303cd8196d89a52835ff5debafb7055de2c1f003\"\"}}]\"\n2026-04-26 16:28:34.206309,25,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3595830528 Ack=1740357757,5254007bb792525400577f9408004500002831b84000400671f6b95aa276c0a87aa8625cc405d654050067bbc07d50100053973c0000,RT.{..RT.W....E..(1.@.@.q..Z.v..z.b\\...T..g..}P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12728, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29174, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830528, \"\"ack\"\": 1740357757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.358617,26,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3595830528 Ack=1740357757,5254007bb792525400577f9408004500002831b94000400671f5b95aa276c0a87aa8625cc405d654050067bbc07d50110053973c0000,RT.{..RT.W....E..(1.@.@.q..Z.v..z.b\\...T..g..}P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 12729, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29173, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830528, \"\"ack\"\": 1740357757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.358774,27,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1740357757 Ack=3595830529,525400577f945254007bb7920800450000287a5240008006e95bc0a87aa8b95aa276c405625c67bbc07dd654050150102014973c0000,RT.W..RT.{....E..(zR@....[..z..Z.v..b\\g..}.T..P. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31314, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59739, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357757, \"\"ack\"\": 3595830529, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.377157,28,TCP 192.168.122.168:50181 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50181,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=1740357757 Ack=3595830529,525400577f945254007bb7920800450000287a5340008006e95ac0a87aa8b95aa276c405625c67bbc07dd654050150112014973c0000,RT.W..RT.{....E..(zS@....Z..z..Z.v..b\\g..}.T..P. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31315, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59738, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 25180, \"\"seq\"\": 1740357757, \"\"ack\"\": 3595830529, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.377187,29,TCP 185.90.162.118:25180 -> 192.168.122.168:50181,185.90.162.118,192.168.122.168,25180,50181,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3595830529 Ack=1740357758,5254007bb792525400577f94080045000028000040004006a3aeb95aa276c0a87aa8625cc405d654050167bbc07e50100053ee6d0000,RT.{..RT.W....E..(..@.@....Z.v..z.b\\...T..g..~P..S.m..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41902, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50181, \"\"seq\"\": 3595830529, \"\"ack\"\": 1740357758, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 61037, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.378016,30,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=4179116416 Ack=0,525400577f945254007bb7920800450000347a5440008006e94dc0a87aa8b95aa276c418625cf9184180000000008002faf097480000020405b40103030801010402,RT.W..RT.{....E..4zT@....M..z..Z.v..b\\..A..........H..............,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31316, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116416, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 16:29:00.378058,31,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=106768471 Ack=4179116417,5254007bb792525400577f94080045000034000040004006a3a2b95aa276c0a87aa8625cc418065d2857f91841818012a56497480000020405b40101040201030309,RT.{..RT.W....E..4..@.@....Z.v..z.b\\...](W..A....d.H.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41890, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768471, \"\"ack\"\": 4179116417, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 16:29:00.378181,32,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179116417 Ack=106768472,525400577f945254007bb7920800450000287a5540008006e958c0a87aa8b95aa276c418625cf9184181065d285850102014973c0000,RT.W..RT.{....E..(zU@....X..z..Z.v..b\\..A..](XP. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31317, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116417, \"\"ack\"\": 106768472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.378954,33,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4179116417 Ack=106768472,525400577f945254007bb79208004500002c7a5640008006e953c0a87aa8b95aa276c418625cf9184181065d2858501820149740000050010000,P\u0001\u0000\u0000,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 31318, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116417, \"\"ack\"\": 106768472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38720, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"P\\u0001\\u0000\\u0000\"\"}}]\"\n2026-04-26 16:29:00.378968,34,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=106768472 Ack=4179116421,5254007bb792525400577f940800450000281a5c400040068952b95aa276c0a87aa8625cc418065d2858f918418550100053973c0000,RT.{..RT.W....E..(.\\@.@..R.Z.v..z.b\\...](X..A.P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 6748, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35154, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768472, \"\"ack\"\": 4179116421, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:00.379176,35,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=4179116421 Ack=106768472,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,\"x.x...o..6m...I<&X.Q....G.4.F#'...4.{.V.{.G{...U..}s.._...+..{.+.[W...m.....B..G..=\t....kA..l.Z.$f...6..Fd.S.......4.H.B.......Ot..s...n#..n.....k..~.z..,..&..{.y@...,.B.1.HbG...7..v...Y[.$.8..pal7.\tF>....(x^y|.m..?.1...*R.z.3.?..(.m.Cor=w.....y.....ju?.:...hVF;./,...5.{...Fs....<la....O.)Y...........Ql.AP.=*......'.g.^7n.#...1....&..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 376, \"\"id\"\": 31319, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59398, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116421, \"\"ack\"\": 106768472, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 39052, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-26 16:29:00.379185,36,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=106768472 Ack=4179116757,5254007bb792525400577f940800450000281a5d400040068951b95aa276c0a87aa8625cc418065d2858f91842d550100053973c0000,RT.{..RT.W....E..(.]@.@..Q.Z.v..z.b\\...](X..B.P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 6749, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35153, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768472, \"\"ack\"\": 4179116757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.743709,37,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=106768472 Ack=4179116757,5254007bb792525400577f940800450000281a5e400040068950b95aa276c0a87aa8625cc418065d2858f91842d550110053973c0000,RT.{..RT.W....E..(.^@.@..P.Z.v..z.b\\...](X..B.P..S.<..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 6750, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 35152, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768472, \"\"ack\"\": 4179116757, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.743930,38,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=4179116757 Ack=106768473,525400577f945254007bb7920800450000287a5840008006e955c0a87aa8b95aa276c418625cf91842d5065d285950102014973c0000,RT.W..RT.{....E..(zX@....U..z..Z.v..b\\..B..](YP. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31320, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59733, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116757, \"\"ack\"\": 106768473, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.744131,39,TCP 192.168.122.168:50200 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50200,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4179116757 Ack=106768473,525400577f945254007bb7920800450000287a5940008006e954c0a87aa8b95aa276c418625cf91842d5065d285950112014973c0000,RT.W..RT.{....E..(zY@....T..z..Z.v..b\\..B..](YP. ..<..,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31321, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59732, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50200, \"\"dport\"\": 25180, \"\"seq\"\": 4179116757, \"\"ack\"\": 106768473, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.744156,40,TCP 185.90.162.118:25180 -> 192.168.122.168:50200,185.90.162.118,192.168.122.168,25180,50200,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=106768473 Ack=4179116758,5254007bb792525400577f94080045000028000040004006a3aeb95aa276c0a87aa8625cc418065d2859f91842d65010005387450000,RT.{..RT.W....E..(..@.@....Z.v..z.b\\...](Y..B.P..S.E..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41902, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50200, \"\"seq\"\": 106768473, \"\"ack\"\": 4179116758, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 34629, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.744695,41,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=2010040453 Ack=0,525400577f945254007bb7920800450000347a5a40008006e947c0a87aa8b95aa276c422625c77cec885000000008002faf097480000020405b40103030801010402,\"RT.W..RT.{....E..4zZ@....G..z..Z.v.\"\"b\\w............H..............\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31322, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59719, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040453, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-26 16:29:18.744726,42,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4216113772 Ack=2010040454,5254007bb792525400577f94080045000034000040004006a3a2b95aa276c0a87aa8625cc422fb4cca6c77cec8868012a56497480000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@....Z.v..z.b\\.\"\".L.lw......d.H.............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41890, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113772, \"\"ack\"\": 2010040454, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 38728, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-26 16:29:18.744810,43,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2010040454 Ack=4216113773,525400577f945254007bb7920800450000287a5b40008006e952c0a87aa8b95aa276c422625c77cec886fb4cca6d50102014973c0000,\"RT.W..RT.{....E..(z[@....R..z..Z.v.\"\"b\\w....L.mP. ..<..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31323, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59730, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040454, \"\"ack\"\": 4216113773, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.745445,44,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2010040454 Ack=4216113773,525400577f945254007bb79208004500002c7a5c40008006e94dc0a87aa8b95aa276c422625c77cec886fb4cca6d501820149740000060010000,`\u0001\u0000\u0000,[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 31324, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040454, \"\"ack\"\": 4216113773, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38720, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"`\\u0001\\u0000\\u0000\"\"}}]\"\n2026-04-26 16:29:18.745456,45,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4216113773 Ack=2010040458,5254007bb792525400577f940800450000282c7240004006773cb95aa276c0a87aa8625cc422fb4cca6d77cec88a50100053973c0000,\"RT.{..RT.W....E..(,r@.@.w<.Z.v..z.b\\.\"\".L.mw...P..S.<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 30524, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113773, \"\"ack\"\": 2010040458, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:18.745637,46,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=2010040458 Ack=4216113773,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,\"~......^........a.8....q.Y_.[,@..*v.]...@.(.c......4.G.x.X..0<...:..R.M..a..ro.+?....g*.........c^........e.Ch{ 1 .\n..9@..9...X3{'HBV`o.g6.....\t..k.$h.AL..9.G.b.J..:+.e....J.q.St..c.I*.e.<.7..+...t..IN.s..Dy..p..e;.6XN.KKg..AL.....e....@J.2.X..)Z8.......~.M:Lb.z.j\\Ofz.`...J...MW...$..x...T....9..%......_>.4...Nr..Y.....3.3o.;.j.!..;u.@I.v..W....4....\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 392, \"\"id\"\": 31325, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59376, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040458, \"\"ack\"\": 4216113773, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 39068, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-26 16:29:18.745644,47,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4216113773 Ack=2010040810,5254007bb792525400577f940800450000282c7340004006773bb95aa276c0a87aa8625cc422fb4cca6d77cec9ea50100053973c0000,\"RT.{..RT.W....E..(,s@.@.w;.Z.v..z.b\\.\"\".L.mw...P..S.<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 30523, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113773, \"\"ack\"\": 2010040810, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655410,48,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216113773 Ack=2010040810,5254007bb792525400577f940800450000282c7440004006773ab95aa276c0a87aa8625cc422fb4cca6d77cec9ea50110053973c0000,\"RT.{..RT.W....E..(,t@.@.w:.Z.v..z.b\\.\"\".L.mw...P..S.<..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 30522, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113773, \"\"ack\"\": 2010040810, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655606,49,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2010040810 Ack=4216113774,525400577f945254007bb7920800450000287a5e40008006e94fc0a87aa8b95aa276c422625c77cec9eafb4cca6e50102014973c0000,\"RT.W..RT.{....E..(z^@....O..z..Z.v.\"\"b\\w....L.nP. ..<..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31326, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59727, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040810, \"\"ack\"\": 4216113774, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655806,50,TCP 192.168.122.168:50210 -> 185.90.162.118:25180,192.168.122.168,185.90.162.118,50210,25180,TCP,Internal,Private Network,,,,,,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=2010040810 Ack=4216113774,525400577f945254007bb7920800450000287a5f40008006e94ec0a87aa8b95aa276c422625c77cec9eafb4cca6e50112014973c0000,\"RT.W..RT.{....E..(z_@....N..z..Z.v.\"\"b\\w....L.nP. ..<..\",[C2] Staged Payload Source (Stages: 4),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31327, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59726, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.90.162.118\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50210, \"\"dport\"\": 25180, \"\"seq\"\": 2010040810, \"\"ack\"\": 4216113774, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 38716, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-26 16:29:28.655828,51,TCP 185.90.162.118:25180 -> 192.168.122.168:50210,185.90.162.118,192.168.122.168,25180,50210,TCP,Germany,Frankfurt am Main,39378,servinga GmbH,50.1169,8.6837,185.90.162.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4216113774 Ack=2010040811,5254007bb792525400577f94080045000028000040004006a3aeb95aa276c0a87aa8625cc422fb4cca6e77cec9eb50100053ea6a0000,\"RT.{..RT.W....E..(..@.@....Z.v..z.b\\.\"\".L.nw...P..S.j..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 41902, \"\"src\"\": \"\"185.90.162.118\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 25180, \"\"dport\"\": 50210, \"\"seq\"\": 4216113774, \"\"ack\"\": 2010040811, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 60010, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 51, \"total_bytes_sent\": 5744, \"total_bytes_received\": 846, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Raw\"], \"ports_used\": [49899, 49892, 50181, 50200, 50210], \"first_seen\": 1777220770.279836, \"last_seen\": 1777220968.655828, \"packets\": [{\"num\": 1, \"time\": 1777220770.585501, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777220771.19467, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777220772.397797, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777220772.982972, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777220773.288391, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777220773.620223, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777220773.891146, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777220774.833673, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777220775.099347, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777220776.302843, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777220777.241979, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777220777.540151, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777220780.042037, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777220782.045756, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777220784.843165, \"size\": 302, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1777220791.653311, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1777220794.498954, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1777220913.941789, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 19, \"time\": 1777220913.941831, \"size\": 66, \"direction\": \"received\"}, {\"num\": 20, \"time\": 1777220913.942031, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 21, \"time\": 1777220914.206081, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1777220914.206108, \"size\": 54, \"direction\": \"received\"}, {\"num\": 23, \"time\": 1777220914.206297, \"size\": 342, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1777220914.206309, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777220940.358617, \"size\": 54, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777220940.358774, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777220940.377157, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1777220940.377187, \"size\": 54, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777220940.378016, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 30, \"time\": 1777220940.378058, \"size\": 66, \"direction\": \"received\"}, {\"num\": 31, \"time\": 1777220940.378181, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 32, \"time\": 1777220940.378954, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 33, \"time\": 1777220940.378968, \"size\": 54, \"direction\": \"received\"}, {\"num\": 34, \"time\": 1777220940.379176, \"size\": 390, \"direction\": \"sent\"}, {\"num\": 35, \"time\": 1777220940.379185, \"size\": 54, \"direction\": \"received\"}, {\"num\": 36, \"time\": 1777220958.743709, \"size\": 54, \"direction\": \"received\"}, {\"num\": 37, \"time\": 1777220958.74393, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 38, \"time\": 1777220958.744131, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 39, \"time\": 1777220958.744156, \"size\": 54, \"direction\": \"received\"}, {\"num\": 40, \"time\": 1777220958.744695, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 41, \"time\": 1777220958.744726, \"size\": 66, \"direction\": \"received\"}, {\"num\": 42, \"time\": 1777220958.74481, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 43, \"time\": 1777220958.745445, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 44, \"time\": 1777220958.745456, \"size\": 54, \"direction\": \"received\"}, {\"num\": 45, \"time\": 1777220958.745637, \"size\": 406, \"direction\": \"sent\"}, {\"num\": 46, \"time\": 1777220958.745644, \"size\": 54, \"direction\": \"received\"}, {\"num\": 47, \"time\": 1777220968.65541, \"size\": 54, \"direction\": \"received\"}, {\"num\": 48, \"time\": 1777220968.655606, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 49, \"time\": 1777220968.655806, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 50, \"time\": 1777220968.655828, \"size\": 54, \"direction\": \"received\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 198.37599205970764, \"avg_packet_size\": 129.2156862745098, \"packets_per_second\": 0.2570875612037262}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777220770.279836, \"last_seen\": 1777220794.498954, \"packets\": [{\"num\": 0, \"time\": 1777220770.279836, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777220770.585501, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777220771.19467, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777220772.397797, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777220772.982972, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777220773.288391, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777220773.620223, \"size\": 153, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777220773.891146, \"size\": 302, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777220774.833673, \"size\": 153, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777220775.099347, \"size\": 302, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777220776.302843, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777220777.241979, \"size\": 153, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777220777.540151, \"size\": 302, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777220780.042037, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777220782.045756, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777220784.843165, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777220791.653311, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777220794.498954, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 24.219118118286133, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7432145097970962}, {\"id\": \"185.90.162.118\", \"ip\": \"185.90.162.118\", \"packet_count\": 33, \"total_bytes_sent\": 846, \"total_bytes_received\": 1996, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [25180], \"first_seen\": 1777220913.941789, \"last_seen\": 1777220968.655828, \"packets\": [{\"num\": 18, \"time\": 1777220913.941789, \"size\": 66, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777220913.941831, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777220913.942031, \"size\": 54, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777220914.206081, \"size\": 58, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1777220914.206108, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777220914.206297, \"size\": 342, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777220914.206309, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 25, \"time\": 1777220940.358617, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1777220940.358774, \"size\": 54, \"direction\": \"received\"}, {\"num\": 27, \"time\": 1777220940.377157, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777220940.377187, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 29, \"time\": 1777220940.378016, \"size\": 66, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777220940.378058, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777220940.378181, \"size\": 54, \"direction\": \"received\"}, {\"num\": 32, \"time\": 1777220940.378954, \"size\": 58, \"direction\": \"received\"}, {\"num\": 33, \"time\": 1777220940.378968, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 34, \"time\": 1777220940.379176, \"size\": 390, \"direction\": \"received\"}, {\"num\": 35, \"time\": 1777220940.379185, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 36, \"time\": 1777220958.743709, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 37, \"time\": 1777220958.74393, \"size\": 54, \"direction\": \"received\"}, {\"num\": 38, \"time\": 1777220958.744131, \"size\": 54, \"direction\": \"received\"}, {\"num\": 39, \"time\": 1777220958.744156, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 40, \"time\": 1777220958.744695, \"size\": 66, \"direction\": \"received\"}, {\"num\": 41, \"time\": 1777220958.744726, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 42, \"time\": 1777220958.74481, \"size\": 54, \"direction\": \"received\"}, {\"num\": 43, \"time\": 1777220958.745445, \"size\": 58, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1777220958.745456, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1777220958.745637, \"size\": 406, \"direction\": \"received\"}, {\"num\": 46, \"time\": 1777220958.745644, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 47, \"time\": 1777220968.65541, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 48, \"time\": 1777220968.655606, \"size\": 54, \"direction\": \"received\"}, {\"num\": 49, \"time\": 1777220968.655806, \"size\": 54, \"direction\": \"received\"}, {\"num\": 50, \"time\": 1777220968.655828, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Germany\", \"city\": \"Frankfurt am Main\", \"lat\": 50.1169, \"lon\": 8.6837, \"asn\": 39378, \"isp\": \"servinga GmbH\", \"network\": \"185.90.162.0/24\"}, \"duration\": 54.71403908729553, \"avg_packet_size\": 86.12121212121212, \"packets_per_second\": 0.6031358779297747}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777220770.279836, \"last_packet\": 1777220794.498954, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777220770.279836, \"timestamp_iso\": \"2026-04-26T21:56:10.279836\", \"timestamp_human\": \"2026-04-26 21:56:10.279\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777220770.585501, \"timestamp_iso\": \"2026-04-26T21:56:10.585501\", \"timestamp_human\": \"2026-04-26 21:56:10.585\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777220771.19467, \"timestamp_iso\": \"2026-04-26T21:56:11.194670\", \"timestamp_human\": \"2026-04-26 21:56:11.194\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777220772.397797, \"timestamp_iso\": \"2026-04-26T21:56:12.397797\", \"timestamp_human\": \"2026-04-26 21:56:12.397\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777220772.982972, \"timestamp_iso\": \"2026-04-26T21:56:12.982972\", \"timestamp_human\": \"2026-04-26 21:56:12.982\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777220773.288391, \"timestamp_iso\": \"2026-04-26T21:56:13.288391\", \"timestamp_human\": \"2026-04-26 21:56:13.288\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777220773.620223, \"timestamp_iso\": \"2026-04-26T21:56:13.620223\", \"timestamp_human\": \"2026-04-26 21:56:13.620\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777220773.891146, \"timestamp_iso\": \"2026-04-26T21:56:13.891146\", \"timestamp_human\": \"2026-04-26 21:56:13.891\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777220774.833673, \"timestamp_iso\": \"2026-04-26T21:56:14.833673\", \"timestamp_human\": \"2026-04-26 21:56:14.833\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777220775.099347, \"timestamp_iso\": \"2026-04-26T21:56:15.099347\", \"timestamp_human\": \"2026-04-26 21:56:15.099\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777220776.302843, \"timestamp_iso\": \"2026-04-26T21:56:16.302843\", \"timestamp_human\": \"2026-04-26 21:56:16.302\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777220777.241979, \"timestamp_iso\": \"2026-04-26T21:56:17.241979\", \"timestamp_human\": \"2026-04-26 21:56:17.241\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777220777.540151, \"timestamp_iso\": \"2026-04-26T21:56:17.540151\", \"timestamp_human\": \"2026-04-26 21:56:17.540\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777220780.042037, \"timestamp_iso\": \"2026-04-26T21:56:20.042037\", \"timestamp_human\": \"2026-04-26 21:56:20.042\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777220782.045756, \"timestamp_iso\": \"2026-04-26T21:56:22.045756\", \"timestamp_human\": \"2026-04-26 21:56:22.045\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777220784.843165, \"timestamp_iso\": \"2026-04-26T21:56:24.843165\", \"timestamp_human\": \"2026-04-26 21:56:24.843\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777220791.653311, \"timestamp_iso\": \"2026-04-26T21:56:31.653311\", \"timestamp_human\": \"2026-04-26 21:56:31.653\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777220794.498954, \"timestamp_iso\": \"2026-04-26T21:56:34.498954\", \"timestamp_human\": \"2026-04-26 21:56:34.498\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 302, 153, 302, 153, 302, 302, 153, 302, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.3056650161743164, 0.6091690063476562, 1.203127145767212, 0.5851747989654541, 0.3054192066192627, 0.3318319320678711, 0.2709228992462158, 0.9425270557403564, 0.2656741142272949, 1.203495979309082, 0.9391357898712158, 0.2981719970703125, 2.5018861293792725, 2.0037190914154053, 2.7974088191986084, 6.81014609336853, 2.8456430435180664], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 24.219118118286133, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7432145097970962, \"bytes_per_second\": 154.75377681775092, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4246540069580078, \"min_interval\": 0.2656741142272949, \"max_interval\": 6.81014609336853}, {\"source\": \"192.168.122.168\", \"target\": \"185.90.162.118\", \"packet_count\": 18, \"total_bytes\": 1996, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [50181, 50200, 50210], \"dst_ports\": [25180], \"first_packet\": 1777220913.941789, \"last_packet\": 1777220968.655806, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777220913.941789, \"timestamp_iso\": \"2026-04-26T21:58:33.941789\", \"timestamp_human\": \"2026-04-26 21:58:33.941\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31310, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357464, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 20, \"timestamp\": 1777220913.942031, \"timestamp_iso\": \"2026-04-26T21:58:33.942031\", \"timestamp_human\": \"2026-04-26 21:58:33.942\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31311, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357465, \"tcp_ack\": 3595830528, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1777220914.206081, \"timestamp_iso\": \"2026-04-26T21:58:34.206081\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31312, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357465, \"tcp_ack\": 3595830528, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"20010000\", \"payload_ascii\": \" \\u0001\\u0000\\u0000\"}, {\"packet_number\": 23, \"timestamp\": 1777220914.206297, \"timestamp_iso\": \"2026-04-26T21:58:34.206297\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 342, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31313, \"ip_len\": 328, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357469, \"tcp_ack\": 3595830528, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 288, \"payload_preview\": \"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\", \"payload_ascii\": \"c@\\u0011bL\\u0000+&\\u0002K\\\"+J@q\\u0004\\r+3`k\\nb9\\u001eT6m3S\\u0010/\\u0014\\rW\\u0014\\u001a\\u0005!\\u00111\\u0017KA\\u001fDPwVAX\\u001c\\t^1Vu\\u0007\\u0010F($~ByNAiYx\\u0000l;X:\\u0003\\u001f\\u001e\\u001d\\u0003*\\u0018>QW/l\\u001b\\t}TuvF?N\\u000b\\bUC}\\u001a\\u000fBm:\\u0017\\u000e\\na\\u0003<X\\u0015\\u0007ZQ\\u0014 \\\\\\u001fI\\u001a\\u000e\\u001cUF\\n]w2\\u00150<\\u0019m(5]\\u0005]\\u0003\"}, {\"packet_number\": 26, \"timestamp\": 1777220940.358774, \"timestamp_iso\": \"2026-04-26T21:59:00.358774\", \"timestamp_human\": \"2026-04-26 21:59:00.358\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31314, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357757, \"tcp_ack\": 3595830529, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777220940.377157, \"timestamp_iso\": \"2026-04-26T21:59:00.377157\", \"timestamp_human\": \"2026-04-26 21:59:00.377\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31315, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 25180, \"tcp_seq\": 1740357757, \"tcp_ack\": 3595830529, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 29, \"timestamp\": 1777220940.378016, \"timestamp_iso\": \"2026-04-26T21:59:00.378016\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31316, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116416, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 31, \"timestamp\": 1777220940.378181, \"timestamp_iso\": \"2026-04-26T21:59:00.378181\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31317, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116417, \"tcp_ack\": 106768472, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777220940.378954, \"timestamp_iso\": \"2026-04-26T21:59:00.378954\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31318, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116417, \"tcp_ack\": 106768472, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"50010000\", \"payload_ascii\": \"P\\u0001\\u0000\\u0000\"}, {\"packet_number\": 34, \"timestamp\": 1777220940.379176, \"timestamp_iso\": \"2026-04-26T21:59:00.379176\", \"timestamp_human\": \"2026-04-26 21:59:00.379\", \"size\": 390, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31319, \"ip_len\": 376, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116421, \"tcp_ack\": 106768472, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 336, \"payload_preview\": \"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\", \"payload_ascii\": \"xx\\u007fo\\u000b6m\\u0003I<&XQ\\u0001G4F#'\\u0001\\u00174\\u001e{V{G{\\u000f\\u0011U\\u000e}s\\u0005_+\\u0014{+[W.\\u0002m\\u007f\\u0019BG\\u001e=\\tkA\\u001fl\\u0014Z$f6FdS4H\\u0001BOtsn#n\\u0019k~z\\u0002,\\u0005&{y@\\u0015\\u0017,B1HbG\\u00167vY[\\u001c$8\\u001bpal7\\u0003\\tF>\\u0018(x^y|m\\u0013?1*Rz\\u00183?(mCor=wyju?:\\u001bhVF;\\u0016/,.5{Fs<laO\\u0006)Y\\u0001\\u0000\\u0005\\u0011QlAP=*\\u001d\\u0004'g^7n\\u0014#\\u00191\\f&\\u000e\"}, {\"packet_number\": 37, \"timestamp\": 1777220958.74393, \"timestamp_iso\": \"2026-04-26T21:59:18.743930\", \"timestamp_human\": \"2026-04-26 21:59:18.743\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31320, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116757, \"tcp_ack\": 106768473, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 38, \"timestamp\": 1777220958.744131, \"timestamp_iso\": \"2026-04-26T21:59:18.744131\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31321, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50200, \"dst_port\": 25180, \"tcp_seq\": 4179116757, \"tcp_ack\": 106768473, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 40, \"timestamp\": 1777220958.744695, \"timestamp_iso\": \"2026-04-26T21:59:18.744695\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31322, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040453, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 42, \"timestamp\": 1777220958.74481, \"timestamp_iso\": \"2026-04-26T21:59:18.744810\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31323, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040454, \"tcp_ack\": 4216113773, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 43, \"timestamp\": 1777220958.745445, \"timestamp_iso\": \"2026-04-26T21:59:18.745445\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31324, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040454, \"tcp_ack\": 4216113773, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"60010000\", \"payload_ascii\": \"`\\u0001\\u0000\\u0000\"}, {\"packet_number\": 45, \"timestamp\": 1777220958.745637, \"timestamp_iso\": \"2026-04-26T21:59:18.745637\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 406, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31325, \"ip_len\": 392, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040458, \"tcp_ack\": 4216113773, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 352, \"payload_preview\": \"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\", \"payload_ascii\": \"~^a8\\u001fqY_[,@\\u0010*v]\\u001a@\\u001e(c\\u001b\\u001d4G\\u0018xX0<:RMaro+?g*\\u0016c^\\u001d\\u0005eCh{ 1 \\n9@9X3{'HBV`og6\\u0004\\t\\u000fk$h\\u0006AL9GbJ:+\\u001ee\\u001b\\u0005JqStc\\u0003I*e<.7+t\\u0001IN\\u001esDyp\\u001ae;6XNKKg\\u001bAL\\u001de\\u0013\\u0007@J2X)Z8\\u001c\\b~M:Lbz\\u0001j\\\\Ofz\\u0014`JMW\\u000e$xT9%\\u001d_>4\\u000b\\u0004Nr\\u0000Y\\u0005\\u0016\\u001133o;j!;u\\u001f@Iv.\\u0001W4\"}, {\"packet_number\": 48, \"timestamp\": 1777220968.655606, \"timestamp_iso\": \"2026-04-26T21:59:28.655606\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31326, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040810, \"tcp_ack\": 4216113774, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777220968.655806, \"timestamp_iso\": \"2026-04-26T21:59:28.655806\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.90.162.118\", \"ttl\": 128, \"ip_id\": 31327, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50210, \"dst_port\": 25180, \"tcp_seq\": 2010040810, \"tcp_ack\": 4216113774, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 3, \"ACK\": 15, \"PSH\": 6, \"FIN\": 3}, \"packet_sizes\": [66, 54, 58, 342, 54, 54, 66, 54, 58, 390, 54, 54, 66, 54, 58, 406, 54, 54], \"inter_packet_intervals\": [0.00024199485778808594, 0.2640500068664551, 0.00021600723266601562, 26.152477025985718, 0.018383026123046875, 0.0008590221405029297, 0.00016498565673828125, 0.0007729530334472656, 0.0002219676971435547, 18.36475419998169, 0.0002009868621826172, 0.0005638599395751953, 0.00011515617370605469, 0.0006349086761474609, 0.0001919269561767578, 9.909969091415405, 0.00020003318786621094], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 54.714017152786255, \"avg_packet_size\": 110.88888888888889, \"packets_per_second\": 0.3289833380308353, \"bytes_per_second\": 36.48059681719707, \"min_packet_size\": 54, \"max_packet_size\": 406, \"median_packet_size\": 58, \"avg_interval\": 3.2184715972227207, \"min_interval\": 0.00011515617370605469, \"max_interval\": 26.152477025985718}, {\"source\": \"185.90.162.118\", \"target\": \"192.168.122.168\", \"packet_count\": 15, \"total_bytes\": 846, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [25180], \"dst_ports\": [50181, 50200, 50210], \"first_packet\": 1777220913.941831, \"last_packet\": 1777220968.655828, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777220913.941831, \"timestamp_iso\": \"2026-04-26T21:58:33.941831\", \"timestamp_human\": \"2026-04-26 21:58:33.941\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830527, \"tcp_ack\": 1740357465, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777220914.206108, \"timestamp_iso\": \"2026-04-26T21:58:34.206108\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 12727, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830528, \"tcp_ack\": 1740357469, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777220914.206309, \"timestamp_iso\": \"2026-04-26T21:58:34.206309\", \"timestamp_human\": \"2026-04-26 21:58:34.206\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 12728, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830528, \"tcp_ack\": 1740357757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777220940.358617, \"timestamp_iso\": \"2026-04-26T21:59:00.358617\", \"timestamp_human\": \"2026-04-26 21:59:00.358\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 12729, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830528, \"tcp_ack\": 1740357757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777220940.377187, \"timestamp_iso\": \"2026-04-26T21:59:00.377187\", \"timestamp_human\": \"2026-04-26 21:59:00.377\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50181, \"tcp_seq\": 3595830529, \"tcp_ack\": 1740357758, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 30, \"timestamp\": 1777220940.378058, \"timestamp_iso\": \"2026-04-26T21:59:00.378058\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768471, \"tcp_ack\": 4179116417, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1777220940.378968, \"timestamp_iso\": \"2026-04-26T21:59:00.378968\", \"timestamp_human\": \"2026-04-26 21:59:00.378\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 6748, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768472, \"tcp_ack\": 4179116421, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 35, \"timestamp\": 1777220940.379185, \"timestamp_iso\": \"2026-04-26T21:59:00.379185\", \"timestamp_human\": \"2026-04-26 21:59:00.379\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 6749, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768472, \"tcp_ack\": 4179116757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 36, \"timestamp\": 1777220958.743709, \"timestamp_iso\": \"2026-04-26T21:59:18.743709\", \"timestamp_human\": \"2026-04-26 21:59:18.743\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 6750, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768472, \"tcp_ack\": 4179116757, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 39, \"timestamp\": 1777220958.744156, \"timestamp_iso\": \"2026-04-26T21:59:18.744156\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50200, \"tcp_seq\": 106768473, \"tcp_ack\": 4179116758, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 41, \"timestamp\": 1777220958.744726, \"timestamp_iso\": \"2026-04-26T21:59:18.744726\", \"timestamp_human\": \"2026-04-26 21:59:18.744\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113772, \"tcp_ack\": 2010040454, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 44, \"timestamp\": 1777220958.745456, \"timestamp_iso\": \"2026-04-26T21:59:18.745456\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11378, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113773, \"tcp_ack\": 2010040458, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777220958.745644, \"timestamp_iso\": \"2026-04-26T21:59:18.745644\", \"timestamp_human\": \"2026-04-26 21:59:18.745\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11379, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113773, \"tcp_ack\": 2010040810, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 47, \"timestamp\": 1777220968.65541, \"timestamp_iso\": \"2026-04-26T21:59:28.655410\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11380, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113773, \"tcp_ack\": 2010040810, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1777220968.655828, \"timestamp_iso\": \"2026-04-26T21:59:28.655828\", \"timestamp_human\": \"2026-04-26 21:59:28.655\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.90.162.118\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 25180, \"dst_port\": 50210, \"tcp_seq\": 4216113774, \"tcp_ack\": 2010040811, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 3, \"ACK\": 15, \"FIN\": 3}, \"packet_sizes\": [66, 54, 54, 54, 54, 66, 54, 54, 54, 54, 66, 54, 54, 54, 54], \"inter_packet_intervals\": [0.26427698135375977, 0.0002009868621826172, 26.152307987213135, 0.0185699462890625, 0.0008709430694580078, 0.0009100437164306641, 0.00021696090698242188, 18.364524126052856, 0.0004467964172363281, 0.0005700588226318359, 0.0007300376892089844, 0.0001881122589111328, 9.90976595878601, 0.00041794776916503906], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 54.71399688720703, \"avg_packet_size\": 56.4, \"packets_per_second\": 0.2741528832361218, \"bytes_per_second\": 15.462222614517268, \"min_packet_size\": 54, \"max_packet_size\": 66, \"median_packet_size\": 54, \"avg_interval\": 3.908142634800502, \"min_interval\": 0.0001881122589111328, \"max_interval\": 26.152307987213135}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69f0fd1b59a6632dae07de69"},"sha256":"c5ae6f6ec23fd8d5ba1343e49bf805bbc016545715a413227bd5afe9c795002e","timestamp":{"$date":"2026-04-29T10:06:02.848Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\ncheckip.dyndns.org,132.226.247.73,HTTP Host,0/70,Neutral,No,External\nhttp://checkip.dyndns.org,132.226.247.73,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_nzchu0mg.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #8\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #9\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #10\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #12\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #13\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\n######\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #22\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\nConnection: Keep-Alive.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #24\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:48 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,##,\"Payload: T 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #26\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #28\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:49 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,#####,\"Payload: T 192.168.122.168:50104 -> 188.114.96.0:443 [AP] #33\n....v...r..i.v.k.....T0..,...6... .>..Z.-ve....\n.......5./.\n...;.........reallyfreegeoip.org.\n.................#...........\n##\nT 188.114.96.0:443 -> 192.168.122.168:50104 [AP] #35\n....C...?..i...{......X..KR........DOWNGRD...........................#.................0...0..b........=.......IA\"\"-..^0\n..*.H.=...0;1.0...U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10...260415201538Z..260714211150Z0.1.0...U....reallyfreegeoip.org0Y0...*.H.=....*.H.=....B.........q...u.Fd..~.;P..$....Z5SS...........x9IX...p>..h.v.....0....c0.._0...U...........0...U.%..0\n..+.......0...U.......0.0...U......aU...q.)._.<....-p..0...U.#..0....w.5g......{..y{...80^..+........R0P0'..+.....0...http://o.pki.goog/s/we1/Fj00%..+.....0...http://i.pki.goog/we1.crt05..U....0,..reallyfreegeoip.org..*.reallyfreegeoip.org0...U. ..0\n0...g.....06..U.../0-0+.).'.%http://c.pki.goog/we1/A4NN7G_5v7M.crl0....\n+.....y............w...U;.Oz....o.O.....^.U&....r.EK..............H0F.!.......&[...................<.`...!..U.U..9....).....h.....g.7..1....u.........5k.?jz.m.:NC..F...9u.................F0D. Z.@9.8B...l[......Y..g.fo.?|N.... ...._........q.u..D+...t.....Q..0\n..*.H.=....H.0E. ...D.c:E..3.....2..x...B.H..]!mB.!...l.......U..'....v..Y.5....(..S...0...0..%..........w.,\"\"Jv.].....0\n..*.H.=...0G1.0...U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40...231213090000Z..290220140000Z0;1.0...U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10Y0...*.H.=....*.H.=....B..o.:.gWGL!..@.G].XG.@.\\....7..|..K.......\n.........Y.,&...&%....V...0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U.......w.5g......{..y{...80...U.#..0....L..t.I6.....>.j....04..+........(0&0$..+.....0...http://i.pki.goog/r4.crt0+..U...$0\"\"0 ......http://c.pki.goog/r/r4.crl0...U. ..0\n0...g.....0\n..*.H.=....h.0e.1....Q..C..u......@Az&....2-=....#H.R.>dy....,.nU..0&..h.b...~....D~.LI..l.b4...~:..P.....}s..RAM..V..~0..z0..b.........0.3.C.....I=..0...*.H........0W1.0...U....BE1.0...U.\n..GlobalSign nv-sa1.0...U....Root CA1.0...U....GlobalSign Root CA0...231115034321Z..280128000042Z0G1.0...U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40v0...*.H.=....+...\"\".b...ts.h.`.C.5..0{KI...a...F.k.a.5.@.s...0Z.<..|.@v;...G.*...js..r9.)...._^X.e...e......s..j/.........0..0...U...........0...U.%..0...+.........+.......0...U.......0....0...U.......L..t.I6.....>.j....0...U.#..0...`{f.E....P/}..4....K06..+........*0(0&..+.....0...http://i.pki.goog/gsr1.crt0-..U...&0$0\"\". ....http://c.pki.goog/r/gsr1.crl0...U. ..0\n0...g.....0...*.H..............B........?c.....hH.9\"\"s...N-.1......6...y.....j.{.}.t..e.h*,,.B..q...-.k..n.}V.#XX.%...G... ........U.yu5,1[?e....B.....^.....-G...c~....k.......gX......I.P[?:.%....\\.yW.6...&.........>..n..<..8.A..^S.>. W...?H......j#....?/....n..F...g.3&...K..6.&;[..........p...l... ...3Y...|,..5.9...L....B...<..;4.F0D. I38._.-...>...R.U...V`...x..);... ].?.2jq.'.q..Uz?q.s......y....,..........\n##\nT 192.168.122.168:50104 -> 188.114.96.0:443 [AP] #37\n....%...! .!..............;j....fBX^1.Q.0?..........0S.!.......&$F1.N...r.*W......|3FKE.a...=.C......\n##\nT 188.114.96.0:443 -> 192.168.122.168:50104 [AP] #39\n............ ....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[..........0..&.h>(.p....4o);.$.n..U].K?=.U...q..Qr..T....\"\".\n#####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #44\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #46\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:53 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50107 -> 188.114.96.0:443 [AP] #50\n....6...2..i.v.8.....O.........,.....#)=.......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50107 [AP] #53\n....;...7..i...c....F...*.t..'.u:[$DOWNGRD................................0JITU.s...N.t..t\"\"...|.f].K^.&1.a......}...^../..<\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #57\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #59\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:54 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50111 -> 188.114.96.0:443 [AP] #63\n....6...2..i.v.Z...\\..y.................f .....\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50111 [AP] #66\n....;...7..i...=H#\\.C.........K.d.^DOWNGRD................................0.R.&..;..z..D....:.!.......Y.x..u..\n!.Ut...x...\"\"\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #70\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #72\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:55 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50112 -> 188.114.96.0:443 [AP] #76\n....6...2..i.v.jx..m...7....262.w.......+......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50112 [AP] #79\n....;...7..i....'a...O.4..g|.Pd.+tRDOWNGRD................................0j:;G.....d5..@[.#HJ......`.X...Z..r.....=.q.AuO.\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #83\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #85\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:56 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50113 -> 188.114.96.0:443 [AP] #89\n....6...2..i.v.]j.....Y.$.1.C+..}0.Y...H.......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50113 [AP] #92\n....;...7..i....*H..U.#..G.\nw......DOWNGRD................................0....3..p....5...[....w.......$i...,.m.f.T.......\n#####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #97\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #99\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:58 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50115 -> 188.114.96.0:443 [AP] #103\n....6...2..i.v....Zh.vA.$..Z............I?.....\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50115 [AP] #106\n....;...7..i....U..;....V..|2...<..DOWNGRD................................0&.vW{...1q.w.NE..V.q+..1........5,|o_.=o_.).q(t.\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #110\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #112\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:22:59 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50117 -> 188.114.96.0:443 [AP] #116\n....6...2..i.v.E...._!...\\...,...Y....;.ny.....\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50117 [AP] #119\n....;...7..i....'4h.tw...EK.......wDOWNGRD................................0...#..VK.~.?.;#y.:..S...y....._..C\"\"......@...V][\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #123\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #125\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:23:00 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50118 -> 188.114.96.0:443 [AP] #129\n....6...2..i.v\n.8\\.3..7......:..h...?.8v.......\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50118 [AP] #132\n....;...7..i........vuT....w..N....DOWNGRD................................0....Z..J...\"\".A.I..a. .g...........|....G..\\p....\n####\nT 192.168.122.168:50100 -> 132.226.247.73:80 [AP] #136\nGET / HTTP/1.1.\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;).\nHost: checkip.dyndns.org.\n.\"\n0.0,NGrep,##,\"Payload: T 132.226.247.73:80 -> 192.168.122.168:50100 [AP] #138\nHTTP/1.1 200 OK.\nDate: Tue, 28 Apr 2026 18:23:01 GMT.\nContent-Type: text/html.\nContent-Length: 104.\nConnection: keep-alive.\nCache-Control: no-cache.\nPragma: no-cache.\nAccess-Control-Allow-Origin: *.\n.\n<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>.\"\n0.0,NGrep,####,\"Payload: T 192.168.122.168:50119 -> 188.114.96.0:443 [AP] #142\n....6...2..i.v..T.1[......{..V..eK.............\n.......5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[....J.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\n###\nT 188.114.96.0:443 -> 192.168.122.168:50119 [AP] #145\n....;...7..i...#.S3..3..:..\"\"O.5....DOWNGRD................................03u/xI.h.{yQ..f..|1...?.@.......84.GBO..kM....W.l\n#######\nT 192.168.122.168:50120 -> 149.154.166.110:443 [AP] #152\n...........i.v.E. %.5.....i./.K....lL..K'*2..*.,.+.0./.....$.#.(.'.\n...........=.<.5./.\n...V.........api.telegram.org.\n...............................................#...........\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #154\n....E...A...>.v..........'....mGP..DOWNGRD.../.....................#..........O...K..H...0...0............>$.=...0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20...251111151409Z..261213151409Z0.1.0...U....api.telegram.org0..\"\"0...*.H.............0..\n.........\\W..e..x...X/.Z.nI..W...x..<@<!....3..B....s...r97#.V.C.q..$.9..XS..*B.N-.2....*........EXz..E.#..T...I...!.)m...9:.5...G.........r0.I..1|..+)...Ar^5...\"\".Hv0m....).p....kX..s...y..._g.y..%....0..K\\..L.Q....~....5...7...s.n=.v..t.=.,../f.D.'?.........8.........I0..E0...U.......0.0...U.%..0...+.........+.......0...U...........09..U...2000..,.*.(http://crl.godaddy.com/gdig2s1-68200.crl0]..U. .V0T0...g.....0H..`.H...m....0907..+........+http://certificates.godaddy.com/repository/0v..+........j0h0$..+.....0...http://ocsp.godaddy.com/0@..+.....0..4http://certificates.godaddy.com/repository/gdig2.crt0...U.#..0...@..'..4.0.3..l...,..01..U...*0(..api.telegram.org..www.api.telegram.org0...U...............!...6\\(w0..0....\n+.....y......o...k.i.v..m}....w..._......3Ze....s....iw....s{FW.....G0E.!...2..%tgoK.Bb.....%.....u........ V-...G.L.fN...u.Q>|I%T..z../7..I.v..1~WE..E..8...A...!Z\"\".....v...R.....s{G......G0E.!...........Bh3........U......D.... Dw.._....b..x.m..?......7.`.9x6..w..8...|..D_[....n..Y.G\ni.......X.....s{Hn.....H0F.!...O.d....}..G..\"\"&op...4...x@os+..!...>.B.N..6.ST},8.....\"\"..<V......0...*.H.............N:.x....-...@....\n...JV_....L..L..=.....i$C<BeXk.A.K...P.j...UGx-V..f9...9g.|./O.T.{..8..>....\\W.;fi........,).....a...?..l..E.?*.~.*.Y.G;..`...#.u....Z....c.P..\n.`..EN.`Y.:..z...A....xn..| ,.q...|r....Yb.A......Z.B...........O.......8.=....O..}....VL$..S8...0...0...........0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20...110503070000Z..310503070000Z0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20..\"\"0...*.H.............0..\n...........v...b.0d...l...b../.>e...b.<R...EKU.xkc.b...il.....L.E3......+..a.yW....?0<]G.....7.AQ..KT.(.....08...&.fGcm.q&G.8GS.F......E...q..o....0:yO_LG...[...`;..C...3N...'O.%........t.dW..DU.-*:>....2\n..d..:P.J..y3.. .....9.i.lcR.w...t.....PT5KiN.;.I.....R..........0...0...U.......0....0...U...........0...U......@..'..4.0.3..l...,..0...U.#..0...:....g(.....An .....04..+........(0&0$..+.....0...http://ocsp.godaddy.com/05..U....0,0*.(.&.$http://crl.godaddy.com/gdroot-g2.crl0F..U. .?0=0;..U. .0301..+........%https://certs.godaddy.com/repository/0...*.H..............~l...8....K.._O..l>....P..s.W1..../....[....yb....jcs1...H.;.-.]...|%O.V0..D.{,..^...a...*......}.C.D..p........`..r.s$...\"\"....bXD...%......b.Q...Q*...s.v.6....,....*...Mu..?.A.#}[K...X.F..``..}PA......../..T.D..\n...3..-v6&.....a....o.F.(..&}\n..........0....0...0...........0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20...090901000000Z..371231235959Z0..1.0...U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\"\"0...*.H.............0..\n......qb...Y4.......IX.\"\"....\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #156\n C.;....I.'....N...p..2...>.N...O/Y0\"\"...Vk......u.9Q{..5.tN......?........j..............;F|2...f\"\"..im6.......`.8......F..\n>.]|.|..+S..biQ%.a.D..,.C.#..:...)....]....0\n9.....K].2..bC%4.V'...;p*?n.....}....Sm`..,.X.._F.....<..I1\\iF..G......B0@0...U.......0....0...U...........0...U......:....g(.....An .....0...*.H...............]y...Yg.a.~;.1u-. .Oe......../..Z..t.s.8B..{..u...........S.~.F.....+....'....Z.7....l....=.$Oy.5._.......-.......s@.r%......h..W...:...D...7...2..8..d.,~........h..\"\".8-z..T.i._3.z={\n..._9..u..v.3.,./L.....O...JT...}......~...^....C..M..k...e.z...D.\\........,...(... :..L.(d...pv-\n....ghh.....c3s{o/....[,.M...4..j.\\..k.0...2R...{..O.#....[..ro.L#.....E.xj.Z.R..6....C..d.w~x.>...]..%...z......l...V{(f.... ]4.....0m.|k....\n..e....B..G.pL.Pxqd.#\"\".....r.,B..........So..T.<.R.g.; t.|\\..;~....7.Z...a..?v3Z{...K.\\......v...2..7s.|..z\"\" .Y......@..........%....\\n.........\n#\nT 192.168.122.168:50120 -> 149.154.166.110:443 [AP] #157\n....%...! ...UK^y..QuN..Z.k.#....]h].x..xj..........(.........@.5(VM..C..9v.y?c..E.=Y..)U.H.y\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #159\n............X..OI.%........#......@V.H.....k...7V..og.[.\"\"../c..j....M.9......I.F.8.pT.Oy`x-..wrT..Dx....?.l.......W.......z..Io.b..E.......x............ ..y..y.SzZc...X.SD{N.RN.....Q!AVB9u....(....;. .Q..7..l..._0..... ...4..........(v.nu].L..u...O........_gk.;.>....q...J7.\n#\nT 192.168.122.168:50120 -> 149.154.166.110:443 [AP] #160\n....x........j....R....4..K...=....W....]........~.........h8+...(.P_k..Z(...*.#...}^../Rx..'.2.^...i\\.....&J1T$N...W...j..1.Ji\"\"..:...g.4.6..F..UDaX.m..f..>._...KW\n.u.L..C.R.*wH.zw...gy.....f..._...<...8=n..~h\nS.W...0;.[[....A.t!*1.%.W..:.l7..b..........H..z......../..D..~..X.\n......j..L!...Ni.0.......=.T..m...EkN.....|\"\"B.62Y..)cdj..!.fP...{.[.*(.g..P.L)m...;.....g.R......<.hx..\n##\nT 149.154.166.110:443 -> 192.168.122.168:50120 [AP] #162\n.....v.nu].L._..e3....U..I.*C...U.\n.....A.*....\\......U..%.3.c...V=.....L.s_\\.....d.`....I....d.$?......z....O..~t.....c.a.....o.t..h7L.I..=...]......?.....F-[4.....6...x..(...7.W)zM.!.)...u..z......h.>..gU].f.J..I...*.$.[.O..R...Rgt......T...8....\\[...z...`.....Q..|b....D.........N(..N....Z.rl....Hx.j.9hC..V,....pT...$.....-Z.?ra~bv..........G...o.. ..[......C...DD.I..3...j...8,:k.:...je..N.J*.h....)...;...BuHH-.@..5F..nN...=.E.\n#########################################\nT 162.251.85.202:587 -> 192.168.122.168:50121 [AP] #203\n550-\"\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see.\n550 Blocked - Botnet Detention\"\".\"\n0.0,NGrep,#################exit,Payload: \n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpwn4kjrh9/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: %2f,Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f\n0.0,Forensics,Object Extracted: %2f(7),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(7)\n0.0,Forensics,Object Extracted: %2f(5),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(5)\n0.0,Forensics,Object Extracted: %2f(6),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(6)\n0.0,Forensics,Object Extracted: %2f(1),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(1)\n0.0,Forensics,Object Extracted: %2f(4),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(4)\n0.0,Forensics,Object Extracted: %2f(9),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(9)\n0.0,Forensics,Object Extracted: %2f(3),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(3)\n0.0,Forensics,Object Extracted: %2f(2),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(2)\n0.0,Forensics,Object Extracted: %2f(8),Path: /tmp/tmpwn4kjrh9/tshark/objects/%2f(8)\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T10:06:00.622957,Tool:tmpwn4kjrh9/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpwn4kjrh9/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T10:06:00.625149,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpwn4kjrh9/carved/scalpel/audit.txt,1888,688203f9e56591c9730015c27a5be410,4adf7756c21fc25156ff95c338c25907725b496b443d77b31df89192f0569771,4.48,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 10:06:00 2026, Command line:, scalpel -c /tmp/tmpwn4kjrh9/carved/scalpel.conf /tmp/filtered_nzchu0mg.pcap -o /tmp/tmpwn4kjrh9/carved/scalpel , Output directory: /tmp/tmpwn4kjrh9/carved/scalpel, Configuration file: /tmp/tmpwn4kjrh9/carved/scalpel.conf, Opening target , /tmp/filtered_nzchu0mg.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000019.gif        36319, YES               0, filtered_nzchu0mg.pcap, 00000018.gif        26881, YES               0, filtered_nzchu0mg.pcap, 00000017.gif        24841, YES               0, filtered_nzchu0mg.pcap, 00000016.gif        22801, YES               0, filtered_nzchu0mg.pcap, 00000015.gif        20761, YES               0, filtered_nzchu0mg.pcap, 00000014.gif        18633, YES               0, filtered_nzchu0mg.pcap, 00000013.gif        16593, YES               0, filtered_nzchu0mg.pcap, 00000012.gif        14553, YES               0, filtered_nzchu0mg.pcap, 00000011.gif        12513, YES               0, filtered_nzchu0mg.pcap, 00000010.gif         6804, YES               0, filtered_nzchu0mg.pcap, 00000009.gif        36319, YES               0, filtered_nzchu0mg.pcap, 00000008.gif        26881, YES               0, filtered_nzchu0mg.pcap, 00000007.gif        24841, YES               0, filtered_nzchu0mg.pcap, 00000006.gif        22801, YES               0, filtered_nzchu0mg.pcap, 00000005.gif        20761, YES               0, filtered_nzchu0mg.pcap, 00000004.gif        18633, YES               0, filtered_nzchu0mg.pcap, 00000003.gif        16593, YES               0, filtered_nzchu0mg.pcap, 00000002.gif        14553, YES               0, filtered_nzchu0mg.pcap, 00000001.gif        12513, YES               0, filtered_nzchu0mg.pcap, 00000000.gif         6804, YES               0, filtered_nzchu0mg.pcap, Completed at Wed Apr 29 10:06:00 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 31 39 2e 67 69 66 20 20 20 20 20 20 20 20 33 36 33 31 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 38 2e 67 69 66 20 20 20 20 20 20 20 20 32 36 38 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 37 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 38 34 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 36 2e 67 69 66 20 20 20 20 20 20 20 20 32 32 38 30 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 35 2e 67 69 66 20 20 20 20 20 20 20 20 32 30 37 36 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 34 2e 67 69 66 20 20 20 20 20 20 20 20 31 38 36 33 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 33 2e 67 69 66 20 20 20 20 20 20 20 20 31 36 35 39 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 32 2e 67 69 66 20 20 20 20 20 20 20 20 31 34 35 35 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 31 2e 67 69 66 20 20 20 20 20 20 20 20 31 32 35 31 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 31 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 36 38 30 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 39 2e 67 69 66 20 20 20 20 20 20 20 20 33 36 33 31 39 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 38 2e 67 69 66 20 20 20 20 20 20 20 20 32 36 38 38 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 37 2e 67 69 66 20 20 20 20 20 20 20 20 32 34 38 34 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 36 2e 67 69 66 20 20 20 20 20 20 20 20 32 32 38 30 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 35 2e 67 69 66 20 20 20 20 20 20 20 20 32 30 37 36 31 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 34 2e 67 69 66 20 20 20 20 20 20 20 20 31 38 36 33 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 33 2e 67 69 66 20 20 20 20 20 20 20 20 31 36 35 39 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 32 2e 67 69 66 20 20 20 20 20 20 20 20 31 34 35 35 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 31 2e 67 69 66 20 20 20 20 20 20 20 20 31 32 35 31 33 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 30 30 30 30 30 30 30 30 2e 67 69 66 20 20 20 20 20 20 20 20 20 36 38 30 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a\n2026-04-29T10:06:00.619314,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpwn4kjrh9/carved/foremost/audit.txt,1160,355fe88280cfa1ab05b1f9da9b00a4d8,a0b5f6259cb39895f2fba0072a2d216c526db990e4694d6e2264a0c2d82eb42d,4.71,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 10:06:00 2026, Invocation: foremost -t all -i /tmp/filtered_nzchu0mg.pcap -o /tmp/tmpwn4kjrh9/carved/foremost , Output directory: /tmp/tmpwn4kjrh9/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_nzchu0mg.pcap, Start: Wed Apr 29 10:06:00 2026, Length: 38 KB (39428 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , 00000010.htm ,       102 B ,        5391 , 00000012.htm ,       102 B ,        6175 , 00000022.htm ,       102 B ,       11451 , 00000026.htm ,       102 B ,       13491 , 00000030.htm ,       102 B ,       15531 , 00000034.htm ,       102 B ,       17571 , 00000038.htm ,       102 B ,       19699 , 00000042.htm ,       102 B ,       21739 , 00000046.htm ,       102 B ,       23779 , 00000050.htm ,       102 B ,       25819 , Finish: Wed Apr 29 10:06:00 2026, 10 FILES EXTRACTED, htm:, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 10:06:00 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 77 6e 34 6b 6a 72 68 39 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6e 7a 63 68 75 30 6d 67 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 33 38 20 4b 42 20 28 33 39 34 32 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 30 3a 09 30 30 30 30 30 30 31 30 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 20 35 33 39 31 20 09 20 0a 31 3a 09 30 30 30 30 30 30 31 32 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 20 36 31 37 35 20 09 20 0a 32 3a 09 30 30 30 30 30 30 32 32 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 31 34 35 31 20 09 20 0a 33 3a 09 30 30 30 30 30 30 32 36 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 33 34 39 31 20 09 20 0a 34 3a 09 30 30 30 30 30 30 33 30 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 35 35 33 31 20 09 20 0a 35 3a 09 30 30 30 30 30 30 33 34 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 37 35 37 31 20 09 20 0a 36 3a 09 30 30 30 30 30 30 33 38 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 31 39 36 39 39 20 09 20 0a 37 3a 09 30 30 30 30 30 30 34 32 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 32 31 37 33 39 20 09 20 0a 38 3a 09 30 30 30 30 30 30 34 36 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 32 33 37 37 39 20 09 20 0a 39 3a 09 30 30 30 30 30 30 35 30 2e 68 74 6d 20 09 20 20 20 20 20 20 31 30 32 20 42 20 09 20 20 20 20 20 20 32 35 38 31 39 20 09 20 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a 0a 31 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 68 74 6d 3a 3d 20 31 30 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 31 30 3a 30 36 3a 30 30 20 32 30 32 36 0a\n2026-04-29T10:06:00.619158,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000010.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000010.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619204,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000022.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000022.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619184,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000012.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000012.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619314,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000050.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000050.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619235,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000030.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000030.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619218,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000026.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000026.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619252,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000034.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000034.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619282,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000042.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000042.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619268,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000038.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000038.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.619299,Tool:foremost/htm,Unknown,0,Unknown,0,HTTP,00000046.htm,htm,/tmp/tmpwn4kjrh9/carved/foremost/htm/00000046.htm,102,b8c1871df1db301bcf6ebb1689804f1d,820f36c385ab877d7e5a7509cf7e10f0126d09e35669850e571fe2b579d406da,4.67,<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>,3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000009.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000009.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000000.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000000.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000007.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000007.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000008.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000008.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000001.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000001.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000004.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000004.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000003.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000003.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000002.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000002.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000006.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000006.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-3-0,Unknown,0,Unknown,0,HTTP,00000005.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-3-0/00000005.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000019.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000019.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000011.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000011.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000018.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000018.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000014.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000014.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000010.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000010.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000013.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000013.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000016.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000016.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000012.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000012.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000015.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000015.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n2026-04-29T10:06:00.625149,Tool:scalpel/gif-4-0,Unknown,0,Unknown,0,HTTP,00000017.gif,gif,/tmp/tmpwn4kjrh9/carved/scalpel/gif-4-0/00000017.gif,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,212,30392,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n0,2,192.168.122.168,132.226.247.73,GET,checkip.dyndns.org,http://checkip.dyndns.org,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,157,22923,37.03%,37.71%\n50100,47,6906,11.08%,11.36%\n80,47,6906,11.08%,11.36%\n50120,18,6667,4.25%,10.97%\n50104,14,4018,3.30%,6.61%\n49899,9,1278,2.12%,2.10%\n49892,9,2470,2.12%,4.06%\n50113,9,825,2.12%,1.36%\n50107,8,771,1.89%,1.27%\n50111,8,771,1.89%,1.27%\n50112,8,771,1.89%,1.27%\n50115,8,771,1.89%,1.27%\n50117,8,771,1.89%,1.27%\n50118,8,771,1.89%,1.27%\n50119,8,771,1.89%,1.27%\n50121,8,563,1.89%,0.93%\n587,8,563,1.89%,0.93%\n49957,7,378,1.65%,0.62%\n49956,7,378,1.65%,0.62%\n49955,7,378,1.65%,0.62%\n49687,7,378,1.65%,0.62%\n49958,7,378,1.65%,0.62%\n49954,7,378,1.65%,0.62%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-28 18:21:43.554304,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",[TSHARK-OBJECT] %2f; [TSHARK-OBJECT] %2f(7); [TSHARK-OBJECT] %2f(5); [TSHARK-OBJECT] %2f(6); [TSHARK-OBJECT] %2f(1); [TSHARK-OBJECT] %2f(4); [TSHARK-OBJECT] %2f(9); [TSHARK-OBJECT] %2f(3); [TSHARK-OBJECT] %2f(2); [TSHARK-OBJECT] %2f(8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:43.855678,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:44.465033,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:45.668260,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:45.895441,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:46.199361,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:46.808720,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:46.871203,8,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb704000080062953c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.........)S..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46852, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10579, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:48.018008,9,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46853, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10429, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:48.081837,10,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70640008006e950c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....P..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59728, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:49.230467,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:50.433575,12,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:50.496041,13,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70940008006e94dc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E....\t@....M..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:52.840695,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:55.401634,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871c1dfdd19263c7ac00bcd8a87ddd1ff7b6e73a0a85833c638c765edf02ca06838251188d,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......c......}.....:\n..<c.v^......Q..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1c\\\\x1d\\\\xfd\\\\xd1\\\\x92c\\\\xc7\\\\xac\\\\x00\\\\xbc\\\\xd8\\\\xa8}\\\\xdd\\\\x1f\\\\xf7\\\\xb6\\\\xe7:\\\\n\\\\x85\\\\x83<c\\\\x8cv^\\\\xdf\\\\x02\\\\xca\\\\x06\\\\x83\\\\x82Q\\\\x18\\\\x8d\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:21:57.643960,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....m].!%....V.aa..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1.....-1=...g..y'O.5:\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x93\\\\xc2m]\\\\xa9!%\\\\xed\\\\x83\\\\xaf\\\\xd2V\\\\xf4aa\\\\x07\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\xab-1=\\\\xac\\\\xec\\\\x1ag\\\\x18\\\\x8ay\\\\'O\\\\xbf5:' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:05.073843,17,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:07.281885,18,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:47.390152,19,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,S,,,Ether > IP > TCP,3,TCP S Seq=3782496229 Ack=0,525400577f945254007bb792080045000034d28e4000800670b8c0a87aa884e2f749c3b40050e1744fe5000000008002faf0b7a30000020405b40103030801010402,RT.W..RT.{....E..4..@...p...z....I...P.tO.........................,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 53902, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28856, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496229, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 47011, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:47.390207,20,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3385608896 Ack=3782496230,5254007bb792525400577f94080045000034000040004006834784e2f749c0a87aa80050c3b4c9cc4ac0e1744fe68012a564b7a30000020405b40101040201030309,RT.{..RT.W....E..4..@.@..G...I..z..P....J..tO....d...............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 33607, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385608896, \"\"ack\"\": 3782496230, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 47011, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:47.390300,21,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496230 Ack=3385608897,525400577f945254007bb792080045000028d28f4000800670c3c0a87aa884e2f749c3b40050e1744fe6c9cc4ac150100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tO...J.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53903, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28867, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496230, \"\"ack\"\": 3385608897, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:47.390637,22,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000bfd29040008006702bc0a87aa884e2f749c3b40050e1744fe6c9cc4ac150180402b82e0000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a,\"RT.W..RT.{....E.....@...p+..z....I...P.tO...J.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\nConnection: Keep-Alive\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 191, \"\"id\"\": 53904, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28715, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496230, \"\"ack\"\": 3385608897, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 47150, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:47.390650,23,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385608897 Ack=3782496381,5254007bb792525400577f9408004500002838ce400040064a8584e2f749c0a87aa80050c3b4c9cc4ac1e174507d50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....J..tP}P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14542, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19077, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385608897, \"\"ack\"\": 3782496381, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:49.043465,24,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14543, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18771, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385608897, \"\"ack\"\": 3782496381, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:48 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:49.160366,25,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496381 Ack=3385609202,525400577f945254007bb792080045000028d2914000800670c1c0a87aa884e2f749c3b40050e174507dc9cc4bf250100401b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tP}..K.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53905, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28865, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496381, \"\"ack\"\": 3385609202, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:49.187929,26,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d292400080067041c0a87aa884e2f749c3b40050e174507dc9cc4bf250180401b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...pA..z....I...P.tP}..K.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53906, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496381, \"\"ack\"\": 3385609202, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:49.187956,27,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385609202 Ack=3782496508,5254007bb792525400577f9408004500002838d0400040064a8384e2f749c0a87aa80050c3b4c9cc4bf2e17450fc50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....K..tP.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14544, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19075, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609202, \"\"ack\"\": 3782496508, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:49.690256,28,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14545, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18769, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609202, \"\"ack\"\": 3782496508, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:49 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:49.874046,29,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496508 Ack=3385609507,525400577f945254007bb792080045000028d2934000800670bfc0a87aa884e2f749c3b40050e17450fcc9cc4d2350100400b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tP...M#P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53907, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28863, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496508, \"\"ack\"\": 3385609507, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:50.549657,30,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2695327244 Ack=0,525400577f945254007bb792080045000034768d400080062c73c0a87aa8bc726000c3b801bba0a76e0c000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,s..z..r`.......n.........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11379, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327244, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:50.549697,31,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3685359036 Ack=2695327245,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3b8dbaa1dbca0a76e0d8012a56457ea0000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@....r`...z...........n\n...dW..............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685359036, \"\"ack\"\": 2695327245, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:50.549806,32,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327245 Ack=3685359037,525400577f945254007bb792080045000028768e400080062c7ec0a87aa8bc726000c3b801bba0a76e0ddbaa1dbd5010201457de0000,\"RT.W..RT.{....E..(v.@...,~..z..r`.......n\n....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11390, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327245, \"\"ack\"\": 3685359037, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:51.952178,33,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2695327245 Ack=3685359037,525400577f945254007bb7920800450000a3768f400080062c02c0a87aa8bc726000c3b801bba0a76e0ddbaa1dbd5018201458590000160301007601000072030169d776016b9ce586a0ba54300b072c1d1c8136dd96e7209f3e1aeb5a932d766500000ec00ac009c014c0130035002f000a0100003b0000001800160000137265616c6c796672656567656f69702e6f7267000a00080006001d00170018000b000201000023000000170000ff01000100,\"RT.W..RT.{....E...v.@...,...z..r`.......n\n....P. .XY......v...r..i.v.k.....T0..,...6... .>..Z.-ve....\n.\t.....5./.\n...;.........reallyfreegeoip.org.\n.................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 30351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11266, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327245, \"\"ack\"\": 3685359037, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 118, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=114 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:49  (1775728129) random_bytes=6b9ce586a0ba54300b072c1d1c8136dd96e7209f3e1aeb5a932d7665 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=59 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:51.952194,34,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3685359037 Ack=2695327368,5254007bb792525400577f94080045000028bae240004006282abc726000c0a87aa801bbc3b8dbaa1dbda0a76e885010005357de0000,RT.{..RT.W....E..(..@.@.(*.r`...z...........n.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47842, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10282, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685359037, \"\"ack\"\": 2695327368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.219863,35,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS > TLS,7,TCP PA Seq=3685359037 Ack=2695327368,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,\"RT.{..RT.W....E.\n...@.@..m.r`...z...........n.P..Sb.......C...?..i...{......X..KR........DOWNGRD...\t.......................#.....\t...\t..\t....0...0..b........=.......IA\"\"-..^0\n..*.H.=...0;1.0\t..U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10..\n260415201538Z.\n260714211150Z0.1.0...U....reallyfreegeoip.org0Y0...*.H.=....*.H.=....B.........q...u.Fd..~.;P..$....Z5SS...........x9IX...p>..h.v.....0....c0.._0...U...........0...U.%..0\n..+.......0...U.......0.0...U......aU...q.)\t_.<....-p..0...U.#..0....w.5g......{..y{...80^..+........R0P0'..+.....0...http://o.pki.goog/s/we1/Fj00%..+.....0...http://i.pki.goog/we1.crt05..U....0,..reallyfreegeoip.org..*.reallyfreegeoip.org0...U. ..0\n0...g.....06..U.../0-0+.).'.%http://c.pki.goog/we1/A4NN7G_5v7M.crl0....\n+.....y............w..\tU;.Oz....o.O.....^.U&....r.EK..............H0F.!.......&[...................<.`...!..U.U..9....).....h.....g.7..1....u.........5k.?jz.m.:NC..F...9u.................F0D. Z.@9.8B...l[......Y..g.fo.?|N.... ...._........q.u..D+...t.....Q..0\n..*.H.=....H.0E. ...D.c:E..3.....2..x...B.H..]!mB.!...l.......U..'....v..Y.5....(..S...0...0..%..........w.,\"\"Jv.].....0\n..*.H.=...0G1.0\t..U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40..\n231213090000Z.\n290220140000Z0;1.0\t..U....US1.0...U.\n..Google Trust Services1.0\n..U....WE10Y0...*.H.=....*.H.=....B..o.:.gWGL!..@.G].XG.@.\\....7..|..K.......\n.........Y.,&...&%....V...0..0...U...........0...U.%..0...+.........+.......0...U.......0.......0...U.......w.5g......{..y{...80...U.#..0....L..t.I6.....>.j....04..+........(0&0$..+.....0...http://i.pki.goog/r4.crt0+..U...$0\"\"0 ......http://c.pki.goog/r/r4.crl0...U. ..0\n0...g.....0\n..*.H.=....h.0e.1....Q..C..u......@Az&....2-=....#H.R.>dy....,.nU..0&..h.b...~....D~.LI..l.b4...~:..P.....}s..RAM..V..~0..z0..b.........0.3.C.....I=..0\n.\t*.H..\n.....0W1.0\t..U....BE1.0...U.\n..GlobalSign nv-sa1.0...U....Root CA1.0...U....GlobalSign Root CA0..\n231115034321Z.\n280128000042Z0G1.0\t..U....US1\"\"0 ..U.\n..Google Trust Services LLC1.0...U....GTS Root R40v0...*.H.=....+...\"\".b...ts.h.`.C.5..0{KI...a...F.k.a.5.@.s...0Z.<..|.@v;...G.*...js..r9.)...._^X.e...e......s..j/.........0..0...U...........0...U.%..0...+.........+.......0...U.......0....0...U.......L..t.I6.....>.j....0...U.#..0...`{f.E\n...P/}..4....K06..+........*0(0&..+.....0...http://i.pki.goog/gsr1.crt0-..U...&0$0\"\". ....http://c.pki.goog/r/gsr1.crl0...U. ..0\n0...g.....0\n.\t*.H..\n...........B........?c..\t..hH.9\"\"s...N-.1...\t..6...y.....j.{.}.t..e.h*,,.B..q...-.k..n.}V.#XX.%...G... ..\t.....U.yu5,1[?e....B.....^.....-G...c~....k.......gX.....\nI.P[?:.%....\\.yW.6...&.........>..n..<..8.A..^S.>. W...?H......j#....?/....n..F...g.3&...K..6.&;[..........p...l... ...3Y...|,..5.9...L\n...B...<..;4.F0D. I38._.-...>...R.U...V`...x..);... ].?.2jq.'.q..Uz?q.s......y....,..........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 2788, \"\"id\"\": 47843, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 7533, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685359037, \"\"ack\"\": 2695327368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 25242, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 67, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=63 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:52  (1777400572) random_bytes=7bacd9f494db7f5817bd4b52c504dbdaff01bde8444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=23 ext=[<TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 2545, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSCertificate  msgtype=certificate msglen=2541 certslen=2538 certs=[(960, [X.509 Cert. Subject:/CN=reallyfreegeoip.org, Issuer:/C=US/O=Google Trust Services/CN=WE1]), (675, [X.509 Cert. Subject:/C=US/O=Google Trust Services/CN=WE1, Issuer:/C=US/O=Google Trust Services LLC/CN=GTS Root R4]), (894, [X.509 Cert. Subject:/C=US/O=Google Trust Services LLC/CN=GTS Root R4, Issuer:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA])] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 112, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerKeyExchange  msgtype=server_key_exchange msglen=108 params=<ServerECDHNamedCurveParams  curve_type=named_curve named_curve=x25519 pointlen=32 point=b'\\\\x96\\\\xcd\\\\x9e3Y\\\\x05\\\\xc4\\\\xb2|,\\\\xda\\\\xbc5\\\\xfe9\\\\xfb\\\\x9d\\\\x86L\\\\r\\\\xdb\\\\xdd\\\\xbfB\\\\xc7\\\\x04\\\\xf7<\\\\xbb\\\\xdc;4' |> sig=<_TLSSignature  sig_alg=None sig_len=70 sig_val=b\\\"\"0D\\\\x02 I38\\\\x8e_\\\\xae-\\\\xc5\\\\x84\\\\x01>\\\\x15\\\\x0c\\\\xfcR\\\\xceU\\\\x98\\\\xbf\\\\x19V`\\\\x88\\\\xdb\\\\xecx\\\\x0b\\\\xe2);\\\\xc8\\\\xd6\\\\x02 ]\\\\xfe?\\\\x1b2jq\\\\x8f'\\\\xd0q\\\\xd9\\\\xc8Uz?q\\\\xb0s\\\\xd4\\\\x1b\\\\xc0\\\\x0e\\\\xee\\\\x0by\\\\x96\\\\xb2\\\\x0b\\\\xe6,\\\\xfe\\\"\" |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 4, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHelloDone  msgtype=server_hello_done msglen=0 |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:52.219978,36,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327368 Ack=3685361785,525400577f945254007bb7920800450000287690400080062c7cc0a87aa8bc726000c3b801bba0a76e88dbaa28795010201457de0000,\"RT.W..RT.{....E..(v.@...,|..z..r`.......n...(yP. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11388, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327368, \"\"ack\"\": 3685361785, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.229028,37,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2695327368 Ack=3685361785,525400577f945254007bb79208004500008d7691400080062c16c0a87aa8bc726000c3b801bba0a76e88dbaa2879501820145843000016030100251000002120f72182de96c8e0e00c0fd5dbe197faa33b6af101acc66642585e31a05116303f1403010001011603010030531021d6cddaa985979226244631ca4efed1bb72dd2a5714d2b7970ea77c33464b45f961d817d13df943b3fb838a19c8, .!..............;j....fBX^1.Q.0?,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 141, \"\"id\"\": 30353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11286, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327368, \"\"ack\"\": 3685361785, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22595, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 37, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=33 exchkeys=<Raw  load=b' \\\\xf7!\\\\x82\\\\xde\\\\x96\\\\xc8\\\\xe0\\\\xe0\\\\x0c\\\\x0f\\\\xd5\\\\xdb\\\\xe1\\\\x97\\\\xfa\\\\xa3;j\\\\xf1\\\\x01\\\\xac\\\\xc6fBX^1\\\\xa0Q\\\\x160?' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'S\\\\x10!\\\\xd6\\\\xcd\\\\xda\\\\xa9\\\\x85\\\\x97\\\\x92&$F1\\\\xcaN\\\\xfe\\\\xd1\\\\xbbr\\\\xdd*W\\\\x14\\\\xd2\\\\xb7\\\\x97\\\\x0e\\\\xa7|3FKE\\\\xf9a\\\\xd8\\\\x17\\\\xd1=\\\\xf9C\\\\xb3\\\\xfb\\\\x83\\\\x8a\\\\x19\\\\xc8' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:52.229052,38,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3685361785 Ack=2695327469,5254007bb792525400577f94080045000028bae5400040062827bc726000c0a87aa801bbc3b8dbaa2879a0a76eed5010005357de0000,RT.{..RT.W....E..(..@.@.('.r`...z.......(y..n.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10279, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685361785, \"\"ack\"\": 2695327469, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.454410,39,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3685361785 Ack=2695327469,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,\"..&.h>(.p....4o);.$.n..U].K?=.U...q..Qr..T....\"\".\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 306, \"\"id\"\": 47846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10012, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685361785, \"\"ack\"\": 2695327469, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22760, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 202, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=198 lifetime=64800 ticketlen=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'\\\\xad\\\\x03&\\\\xdch>(\\\\xafp\\\\x1b.\\\\x02\\\\xf34o);\\\\x8d$\\\\x98n\\\\x8c\\\\xf6U]\\\\xb2K?=\\\\xf4U\\\\xcb\\\\xb6\\\\xbbq\\\\xde\\\\xfaQr\\\\x01\\\\xf5T\\\\xb5\\\\xe8\\\\xd2\\\\xa3\\\"\"\\\\xae' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:52.580693,40,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327469 Ack=3685362051,525400577f945254007bb7920800450000287692400080062c7ac0a87aa8bc726000c3b801bba0a76eeddbaa29835010201357de0000,\"RT.W..RT.{....E..(v.@...,z..z..r`.......n...).P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30354, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11386, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327469, \"\"ack\"\": 3685362051, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.792760,41,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=2695327469 Ack=3685362051,525400577f945254007bb7920800450000287693400080062c79c0a87aa8bc726000c3b801bba0a76eeddbaa29835011201357de0000,\"RT.W..RT.{....E..(v.@...,y..z..r`.......n...).P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30355, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11385, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327469, \"\"ack\"\": 3685362051, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.792860,42,TCP 188.114.96.0:443 -> 192.168.122.168:50104,188.114.96.0,192.168.122.168,443,50104,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3685362051 Ack=2695327470,5254007bb792525400577f94080045000028bae7400040062825bc726000c0a87aa801bbc3b8dbaa2983a0a76eee5011005357de0000,RT.{..RT.W....E..(..@.@.(%.r`...z.......)...n.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 10277, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50104, \"\"seq\"\": 3685362051, \"\"ack\"\": 2695327470, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.792980,43,TCP 192.168.122.168:50104 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50104,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2695327470 Ack=3685362052,525400577f945254007bb7920800450000287694400080062c78c0a87aa8bc726000c3b801bba0a76eeedbaa29845010201357de0000,\"RT.W..RT.{....E..(v.@...,x..z..r`.......n...).P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30356, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11384, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50104, \"\"dport\"\": 443, \"\"seq\"\": 2695327470, \"\"ack\"\": 3685362052, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:52.897042,44,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29440008006703fc0a87aa884e2f749c3b40050e17450fcc9cc4d2350180400b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p?..z....I...P.tP...M#P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53908, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496508, \"\"ack\"\": 3385609507, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:52.897073,45,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385609507 Ack=3782496635,5254007bb792525400577f9408004500002838d2400040064a8184e2f749c0a87aa80050c3b4c9cc4d23e174517b50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....M#.tQ{P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14546, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19073, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609507, \"\"ack\"\": 3782496635, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:53.473733,46,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14547, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18767, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609507, \"\"ack\"\": 3782496635, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:53 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:53.507754,47,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=4000321737 Ack=0,525400577f945254007bb7920800450000347695400080062c6bc0a87aa8bc726000c3bb01bbee7010c9000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,k..z..r`......p..........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30357, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11371, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000321737, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:53.507822,48,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3056081028 Ack=4000321738,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3bbb6281884ee7010ca8012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z......(...p.....dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081028, \"\"ack\"\": 4000321738, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:53.507935,49,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4000321738 Ack=3056081029,525400577f945254007bb7920800450000287696400080062c76c0a87aa8bc726000c3bb01bbee7010cab62818855010201457de0000,\"RT.W..RT.{....E..(v.@...,v..z..r`......p...(..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30358, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11382, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000321738, \"\"ack\"\": 3056081029, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:53.508465,50,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4000321738 Ack=3056081029,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,\"RT.W..RT.{....E..cv.@...+:..z..r`......p...(..P. .Y.......6...2..i.v.8.....O.........,.....#)=..\t....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30359, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11066, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000321738, \"\"ack\"\": 3056081029, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:51  (1775728131) random_bytes=388ef6fba5c04fbe1bf9f5d2efeaf21b2c1cbe1de7dd23293db00209 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:53.508493,51,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3056081029 Ack=4000322053,5254007bb792525400577f940800450000288c364000400656d6bc726000c0a87aa801bbc3bbb6281885ee7012055010005357de0000,RT.{..RT.W....E..(.6@.@.V..r`...z......(...p..P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35894, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22230, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081029, \"\"ack\"\": 4000322053, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:53.674969,52,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496635 Ack=3385609812,525400577f945254007bb792080045000028d2954000800670bdc0a87aa884e2f749c3b40050e174517bc9cc4e54501003feb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tQ{..NTP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53909, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28861, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496635, \"\"ack\"\": 3385609812, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.098424,53,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3056081029 Ack=4000322053,Error,\"Error extracting content: b'JITU\\xc5s\\xc2\\x0b\\x8dN\\xc8t\\xca\\x1bt\"\"\\xe3\\xa0\\x8f|\\x0cf]\\xf1K^\\x96&1\\x91a\\xa9\\xfd\\xdb\\xd4\\xc0\\xa9}\\xc9\\xf6\\xff^\\xf9\\xd5/\\xad\\xc6<3o\\xe8|q\\x1d\\xb3k\\x9f\\x01\\xac r\\x03\\x93\"\"\\x9d\\x82\\xf4P\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 35895, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22106, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081029, \"\"ack\"\": 4000322053, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:53  (1777400573) random_bytes=63f5db978c46a017142ae174fa8627b3753a5b24444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"JITU\\\\\\\\xc5s\\\\\\\\xc2\\\\u000b\\\\\\\\x8dN\\\\\\\\xc8t\\\\\\\\xca\\\\u001bt\\\\\\\"\"\\\\u380f|\\\\ff]\\\\\\\\xf1K^\\\\\\\\x96&1\\\\\\\\x91a\\\\\\\\xa9\\\\\\\\xfd\\\\\\\\xdb\\\\\\\\xd4\\\\\\\\xc0\\\\\\\\xa9}\\\\\\\\xc9\\\\\\\\xf6\\\\\\\\xff^\\\\\\\\xf9\\\\\\\\xd5/\\\\\\\\xad\\\\\\\\xc6<\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:54.105995,54,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=4000322053 Ack=3056081152,525400577f945254007bb7920800450000287698400080062c74c0a87aa8bc726000c3bb01bbee701205b62819005011201457de0000,\"RT.W..RT.{....E..(v.@...,t..z..r`......p...(..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30360, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11380, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000322053, \"\"ack\"\": 3056081152, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.106101,55,TCP 188.114.96.0:443 -> 192.168.122.168:50107,188.114.96.0,192.168.122.168,443,50107,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3056081152 Ack=4000322054,5254007bb792525400577f940800450000288c384000400656d4bc726000c0a87aa801bbc3bbb6281900ee7012065011005357de0000,RT.{..RT.W....E..(.8@.@.V..r`...z......(...p..P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35896, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22228, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50107, \"\"seq\"\": 3056081152, \"\"ack\"\": 4000322054, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.106189,56,TCP 192.168.122.168:50107 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50107,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4000322054 Ack=3056081153,525400577f945254007bb7920800450000287699400080062c73c0a87aa8bc726000c3bb01bbee701206b62819015010201457de0000,\"RT.W..RT.{....E..(v.@...,s..z..r`......p...(..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30361, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11379, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50107, \"\"dport\"\": 443, \"\"seq\"\": 4000322054, \"\"ack\"\": 3056081153, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.110449,57,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29640008006703dc0a87aa884e2f749c3b40050e174517bc9cc4e54501803feb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p=..z....I...P.tQ{..NTP.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53910, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28733, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496635, \"\"ack\"\": 3385609812, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:54.110467,58,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385609812 Ack=3782496762,5254007bb792525400577f9408004500002838d4400040064a7f84e2f749c0a87aa80050c3b4c9cc4e54e17451fa50100053b7970000,RT.{..RT.W....E..(8.@.@.J....I..z..P....NT.tQ.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14548, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19071, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609812, \"\"ack\"\": 3782496762, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.576307,59,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14549, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18765, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385609812, \"\"ack\"\": 3782496762, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:54 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:54.577683,60,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=1533454273 Ack=0,525400577f945254007bb792080045000034769a400080062c66c0a87aa8bc726000c3bf01bb5b66a7c1000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,f..z..r`.....[f..........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30362, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11366, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454273, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:54.577751,61,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=177481288 Ack=1533454274,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3bf0a9426485b66a7c28012a56457ea0000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@....r`...z.....\n.&H[f.....dW..............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481288, \"\"ack\"\": 1533454274, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:54.577854,62,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1533454274 Ack=177481289,525400577f945254007bb792080045000028769b400080062c71c0a87aa8bc726000c3bf01bb5b66a7c20a9426495010040257de0000,\"RT.W..RT.{....E..(v.@...,q..z..r`.....[f..\n.&IP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30363, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11377, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454274, \"\"ack\"\": 177481289, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.578339,63,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1533454274 Ack=177481289,525400577f945254007bb792080045000163769c400080062b35c0a87aa8bc726000c3bf01bb5b66a7c20a9426495018040259190000160301013601000132030169d776045a98eaff5cf4e779d0b5bafb91c8061194b9fd9ab0f49f8e0666208b00000ec00ac009c014c0130035002f000a010000fb0000001800160000137265616c6c796672656567656f69702e6f7267000a00080006001d00170018000b00020100002300c0168334713c1d2370c2d8321cd32fed7f29083530180fb4e70816062a0f1580975b098bfd0d4aa44918648244e9032c72d81e6a5432615b24fd4ed6de2e55a8a938adea3238a35c1bcba5385e8c1591d9ef3e39ae5b07f90e6c59465bc94956f4cfcfeaa25d9c9001dac96b74cd8bae425eeda4baefab7b5722f3254595d3e8a122e99292e531c2908eed19ac46599d0473fa85bfcdad1456250e7c27b68c3f4e80bedb61c3f3041febf95d7412253518124d6656a06b0f016f7799af38dd3d5b00170000ff01000100,\"RT.W..RT.{....E..cv.@...+5..z..r`.....[f..\n.&IP...Y.......6...2..i.v.Z...\\..y.................f .....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30364, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11061, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454274, \"\"ack\"\": 177481289, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:52  (1775728132) random_bytes=5a98eaff5cf4e779d0b5bafb91c8061194b9fd9ab0f49f8e0666208b sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:54.578361,64,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=177481289 Ack=1533454589,5254007bb792525400577f94080045000028aa89400040063883bc726000c0a87aa801bbc3bf0a9426495b66a8fd5010005357de0000,\"RT.{..RT.W....E..(..@.@.8..r`...z.....\n.&I[f..P..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43657, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14467, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481289, \"\"ack\"\": 1533454589, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.674912,65,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496762 Ack=3385610117,525400577f945254007bb792080045000028d2974000800670bbc0a87aa884e2f749c3b40050e17451fac9cc4f85501003fdb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tQ...O.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53911, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28859, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496762, \"\"ack\"\": 3385610117, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.956212,66,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=177481289 Ack=1533454589,Error,\"Error extracting content: b'\\xb9R\\x84&\\xd1\\x95;\\x81\\xbfz\\x0e\\x8bD\\xdd\\x83\\x90\\xdb:\\xd7!\\xb5\\xde\\xe1\\x0e\\xf3\\xa9\\xc0Y\\xddx\\x16\\xe3u\\xec\\xbc\\n!\\xc5Ut\\xc9\\xe9\\x83x\\xdf\\xd6\\xb9\"\"\\xb1\\xe4\\xcf\\xba\\xe0;\\xebg\\xa4\\xcd\\x85\\xa4\\x95\\x9d\\xf4\\xb4\\xe1\\r1\\xb6\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 43658, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14343, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481289, \"\"ack\"\": 1533454589, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:54  (1777400574) random_bytes=3d48235ce943b0c1a8ca830fbf108d4bd364965e444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"\\\\\\\\xb9R\\\\\\\\x84&\\\\u0455;\\\\\\\\x81\\\\\\\\xbfz\\\\u000e\\\\\\\\x8bD\\\\u0743\\\\\\\\x90\\\\\\\\xdb:\\\\\\\\xd7!\\\\\\\\xb5\\\\\\\\xde\\\\\\\\xe1\\\\u000e\\\\\\\\xf3\\\\\\\\xa9\\\\\\\\xc0Y\\\\\\\\xddx\\\\u0016\\\\\\\\xe3u\\\\\\\\xec\\\\\\\\xbc\\\\n!\\\\\\\\xc5Ut\\\\\\\\xc9\\\\\\\\xe9\\\\\\\\x83x\\\\\\\\xdf\\\\u05b9\\\\\\\"\"\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:54.963151,67,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=1533454589 Ack=177481412,525400577f945254007bb792080045000028769d400080062c6fc0a87aa8bc726000c3bf01bb5b66a8fd0a9426c45011040257de0000,\"RT.W..RT.{....E..(v.@...,o..z..r`.....[f..\n.&.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30365, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11375, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454589, \"\"ack\"\": 177481412, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.963293,68,TCP 188.114.96.0:443 -> 192.168.122.168:50111,188.114.96.0,192.168.122.168,443,50111,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=177481412 Ack=1533454590,5254007bb792525400577f94080045000028aa8b400040063881bc726000c0a87aa801bbc3bf0a9426c45b66a8fe5011005357de0000,\"RT.{..RT.W....E..(..@.@.8..r`...z.....\n.&.[f..P..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43659, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 14465, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50111, \"\"seq\"\": 177481412, \"\"ack\"\": 1533454590, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.963386,69,TCP 192.168.122.168:50111 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50111,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1533454590 Ack=177481413,525400577f945254007bb792080045000028769e400080062c6ec0a87aa8bc726000c3bf01bb5b66a8fe0a9426c55010040257de0000,\"RT.W..RT.{....E..(v.@...,n..z..r`.....[f..\n.&.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30366, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11374, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50111, \"\"dport\"\": 443, \"\"seq\"\": 1533454590, \"\"ack\"\": 177481413, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:54.993879,70,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29840008006703bc0a87aa884e2f749c3b40050e17451fac9cc4f85501803fdb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p;..z....I...P.tQ...O.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53912, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496762, \"\"ack\"\": 3385610117, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:54.993925,71,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385610117 Ack=3782496889,5254007bb792525400577f9408004500002838d6400040064a7d84e2f749c0a87aa80050c3b4c9cc4f85e174527950100053b7970000,RT.{..RT.W....E..(8.@.@.J}...I..z..P....O..tRyP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14550, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19069, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610117, \"\"ack\"\": 3782496889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.507824,72,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14551, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18763, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610117, \"\"ack\"\": 3782496889, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:55 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:55.509256,73,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2730598044 Ack=0,525400577f945254007bb792080045000034769f400080062c61c0a87aa8bc726000c3c001bba2c19e9c000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,a..z..r`.................W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30367, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11361, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598044, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:55.509313,74,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2760143355 Ack=2730598045,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c0a48471fba2c19e9d8012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z.......q........dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143355, \"\"ack\"\": 2730598045, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:55.509450,75,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730598045 Ack=2760143356,525400577f945254007bb79208004500002876a0400080062c6cc0a87aa8bc726000c3c001bba2c19e9da48471fc5010040257de0000,\"RT.W..RT.{....E..(v.@...,l..z..r`...........q.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30368, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11372, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598045, \"\"ack\"\": 2760143356, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.509826,76,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2730598045 Ack=2760143356,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,\"RT.W..RT.{....E..cv.@...+0..z..r`...........q.P...Y.......6...2..i.v.jx..m...7....262.w.......+......\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30369, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11056, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598045, \"\"ack\"\": 2760143356, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:53  (1775728133) random_bytes=6a78828e6dbe1d9d37f71886d23236321d77eb97e6a79ae7b42b8bd9 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:55.509846,77,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2760143356 Ack=2730598360,5254007bb792525400577f940800450000286fe040004006732cbc726000c0a87aa801bbc3c0a48471fca2c19fd85010005357de0000,\"RT.{..RT.W....E..(o.@.@.s,.r`...z.......q.....P..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 28640, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29484, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143356, \"\"ack\"\": 2730598360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.573041,78,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782496889 Ack=3385610422,525400577f945254007bb792080045000028d2994000800670b9c0a87aa884e2f749c3b40050e1745279c9cc50b650100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tRy..P.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53913, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28857, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496889, \"\"ack\"\": 3385610422, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.903543,79,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2760143356 Ack=2730598360,Error,Error extracting content: b'j:;G\\xf6\\xc5\\x04\\xae\\x10d5\\x1d\\x18@[\\xd5#HJ\\xba\\xe4\\xfc\\xd5\\xf6\\xe7`\\xbbX\\xf0\\x03\\x81Z\\xad\\x9cr\\x0f\\xa3\\x81\\x15\\xd3=\\xa7q\\xaaAuO\\x8cL\\xf2va(6YP\\xdcnmg\\x07K\\xfd$\\xbe\\xb6P/\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b',,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 28641, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29360, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143356, \"\"ack\"\": 2730598360, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:55  (1777400575) random_bytes=ff2761c8e2cc4fb834b485677cae5064852b7452444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"j:;G\\\\\\\\xf6\\\\\\\\xc5\\\\u0004\\\\\\\\xae\\\\u0010d5\\\\u001d\\\\u0018@[\\\\\\\\xd5#HJ\\\\\\\\xba\\\\\\\\xe4\\\\\\\\xfc\\\\\\\\xd5\\\\\\\\xf6\\\\\\\\xe7`\\\\\\\\xbbX\\\\\\\\xf0\\\\u0003\\\\\\\\x81Z\\\\\\\\xad\\\\\\\\x9cr\\\\u000f\\\\\\\\xa3\\\\\\\\x81\\\\u0015\\\\\\\\xd3=\\\\\\\\xa7q\\\\\\\\xaaAuO\\\\\\\\x8c\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:55.910470,80,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=2730598360 Ack=2760143479,525400577f945254007bb79208004500002876a2400080062c6ac0a87aa8bc726000c3c001bba2c19fd8a48472775011040257de0000,\"RT.W..RT.{....E..(v.@...,j..z..r`...........rwP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30370, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11370, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598360, \"\"ack\"\": 2760143479, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.910597,81,TCP 188.114.96.0:443 -> 192.168.122.168:50112,188.114.96.0,192.168.122.168,443,50112,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2760143479 Ack=2730598361,5254007bb792525400577f940800450000286fe240004006732abc726000c0a87aa801bbc3c0a4847277a2c19fd95011005357de0000,RT.{..RT.W....E..(o.@.@.s*.r`...z.......rw....P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 28642, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 29482, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50112, \"\"seq\"\": 2760143479, \"\"ack\"\": 2730598361, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:55.910667,82,TCP 192.168.122.168:50112 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50112,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2730598361 Ack=2760143480,525400577f945254007bb79208004500002876a3400080062c69c0a87aa8bc726000c3c001bba2c19fd9a48472785010040257de0000,\"RT.W..RT.{....E..(v.@...,i..z..r`...........rxP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30371, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11369, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50112, \"\"dport\"\": 443, \"\"seq\"\": 2730598361, \"\"ack\"\": 2760143480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.016912,83,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29a400080067039c0a87aa884e2f749c3b40050e1745279c9cc50b650180402b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p9..z....I...P.tRy..P.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53914, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28729, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782496889, \"\"ack\"\": 3385610422, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:56.016972,84,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385610422 Ack=3782497016,5254007bb792525400577f9408004500002838d8400040064a7b84e2f749c0a87aa80050c3b4c9cc50b6e17452f850100053b7970000,RT.{..RT.W....E..(8.@.@.J{...I..z..P....P..tR.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14552, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19067, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610422, \"\"ack\"\": 3782497016, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.448636,85,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14553, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18761, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610422, \"\"ack\"\": 3782497016, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:56 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:56.449893,86,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=3171960685 Ack=0,525400577f945254007bb79208004500003476a4400080062c5cc0a87aa8bc726000c3c101bbbd10476d000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,\\..z..r`.......Gm........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30372, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11356, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171960685, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:56.449951,87,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2210981965 Ack=3171960686,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c183c8e84dbd10476e8012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z........M..Gn...dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210981965, \"\"ack\"\": 3171960686, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:56.450162,88,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3171960686 Ack=2210981966,525400577f945254007bb79208004500002876a5400080062c67c0a87aa8bc726000c3c101bbbd10476e83c8e84e5010201457de0000,\"RT.W..RT.{....E..(v.@...,g..z..r`.......Gn...NP. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30373, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11367, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171960686, \"\"ack\"\": 2210981966, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.450548,89,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3171960686 Ack=2210981966,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,\"RT.W..RT.{....E..cv.@...++..z..r`.......Gn...NP. .Y.......6...2..i.v.]j.....Y.$.1.C+..}0.Y...H\t......\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30374, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11051, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171960686, \"\"ack\"\": 2210981966, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:54  (1775728134) random_bytes=5d6a1c879bd68d599a24dd31ea432b99a67d300659ee10e14809d3f8 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:56.450575,90,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2210981966 Ack=3171961001,5254007bb792525400577f940800450000285506400040068e06bc726000c0a87aa801bbc3c183c8e84ebd1048a95010005357de0000,RT.{..RT.W....E..(U.@.@....r`...z........N..H.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 21766, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 36358, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210981966, \"\"ack\"\": 3171961001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:56.661194,91,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497016 Ack=3385610727,525400577f945254007bb792080045000028d29b4000800670b7c0a87aa884e2f749c3b40050e17452f8c9cc51e750100401b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tR...Q.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53915, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28855, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497016, \"\"ack\"\": 3385610727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.549013,92,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2210981966 Ack=3171961001,Error,\"Error extracting content: b'\\xba\\xf8\\xb7\\xa73\\xc6\\x90p\\x01\\xfa\\xd8\\xa65\\xa7\\x85\\xd9[\\x81\\x85\\x13\\xf1w\\x0f\\xd5\\xfe\\xf1\\x11\\xbb\\xb5$i\\xed\\x08\\x0f,\\x0cm\\xfbf\\x80T\\xa1\\xc1\\x8f\\x07\\x15\\x19\\x87\\xc0\\xfb\\xcf\\xf1\\xec^y\\xfcR\\x07\\x1e\\x10\\x06\\xdb\\xc2\\xbc\\xf6\\x1d(L\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 21767, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 36234, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210981966, \"\"ack\"\": 3171961001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:56  (1777400576) random_bytes=fc2a48ecf155de23839147a60a77a9eb8f8df785444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"\\\\\\\\xba\\\\\\\\xf8\\\\\\\\xb7\\\\\\\\xa73\\\\u0190p\\\\u0001\\\\\\\\xfa\\\\u06265\\\\\\\\xa7\\\\\\\\x85\\\\\\\\xd9[\\\\\\\\x81\\\\\\\\x85\\\\u0013\\\\\\\\xf1w\\\\u000f\\\\\\\\xd5\\\\\\\\xfe\\\\\\\\xf1\\\\u0011\\\\\\\\xbb\\\\\\\\xb5$i\\\\\\\\xed\\\\b\\\\u000f,\\\\fm\\\\\\\\xfbf\\\\\\\\x80T\\\\\\\\xa1\\\\\\\\xc1\\\\\\\\x8f\\\\u0007\\\\u0015\\\\u0019\\\\\\\\x87\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:57.679861,93,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3171961001 Ack=2210982089,525400577f945254007bb79208004500002876a7400080062c65c0a87aa8bc726000c3c101bbbd1048a983c8e8c95010201457de0000,\"RT.W..RT.{....E..(v.@...,e..z..r`.......H.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30375, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11365, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171961001, \"\"ack\"\": 2210982089, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.755073,94,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=3171961001 Ack=2210982089,525400577f945254007bb79208004500002876a8400080062c64c0a87aa8bc726000c3c101bbbd1048a983c8e8c95011201457de0000,\"RT.W..RT.{....E..(v.@...,d..z..r`.......H.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30376, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11364, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171961001, \"\"ack\"\": 2210982089, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.755152,95,TCP 188.114.96.0:443 -> 192.168.122.168:50113,188.114.96.0,192.168.122.168,443,50113,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2210982089 Ack=3171961002,5254007bb792525400577f940800450000285508400040068e04bc726000c0a87aa801bbc3c183c8e8c9bd1048aa5011005357de0000,RT.{..RT.W....E..(U.@.@....r`...z...........H.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 21768, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 36356, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50113, \"\"seq\"\": 2210982089, \"\"ack\"\": 3171961002, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.755274,96,TCP 192.168.122.168:50113 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50113,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=3171961002 Ack=2210982090,525400577f945254007bb79208004500002876a9400080062c63c0a87aa8bc726000c3c101bbbd1048aa83c8e8ca5010201457de0000,\"RT.W..RT.{....E..(v.@...,c..z..r`.......H.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30377, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11363, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50113, \"\"dport\"\": 443, \"\"seq\"\": 3171961002, \"\"ack\"\": 2210982090, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:57.806554,97,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29c400080067037c0a87aa884e2f749c3b40050e17452f8c9cc51e750180401b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p7..z....I...P.tR...Q.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53916, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28727, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497016, \"\"ack\"\": 3385610727, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:57.806588,98,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385610727 Ack=3782497143,5254007bb792525400577f9408004500002838da400040064a7984e2f749c0a87aa80050c3b4c9cc51e7e174537750100053b7970000,RT.{..RT.W....E..(8.@.@.Jy...I..z..P....Q..tSwP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14554, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19065, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610727, \"\"ack\"\": 3782497143, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.361252,99,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14555, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18759, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385610727, \"\"ack\"\": 3782497143, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:58 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:58.362289,100,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=4248002033 Ack=0,525400577f945254007bb79208004500003476aa400080062c56c0a87aa8bc726000c3c301bbfd335df1000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,V..z..r`......3].........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11350, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002033, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:58.362333,101,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2233452560 Ack=4248002034,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c3851fc810fd335df28012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z..........3]....dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452560, \"\"ack\"\": 4248002034, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:58.362408,102,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4248002034 Ack=2233452561,525400577f945254007bb79208004500002876ab400080062c61c0a87aa8bc726000c3c301bbfd335df2851fc8115010201457de0000,\"RT.W..RT.{....E..(v.@...,a..z..r`......3].....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11361, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002034, \"\"ack\"\": 2233452561, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.362806,103,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4248002034 Ack=2233452561,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,\"RT.W..RT.{....E..cv.@...+%..z..r`......3].....P. .Y.......6...2..i.v....Zh.vA.$..Z............I?.....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11045, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002034, \"\"ack\"\": 2233452561, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:56  (1775728136) random_bytes=cb2ea65a68137641da24ad905abdc884a91ff5cf03919cb1e3493f89 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:58.362821,104,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2233452561 Ack=4248002349,5254007bb792525400577f9408004500002873ba400040066f52bc726000c0a87aa801bbc3c3851fc811fd335f2d5010005357de0000,RT.{..RT.W....E..(s.@.@.oR.r`...z..........3_-P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 29626, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28498, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452561, \"\"ack\"\": 4248002349, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.475155,105,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497143 Ack=3385611032,525400577f945254007bb792080045000028d29d4000800670b5c0a87aa884e2f749c3b40050e1745377c9cc531850100400b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tSw..S.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53917, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497143, \"\"ack\"\": 3385611032, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1024, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.823135,106,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2233452561 Ack=4248002349,Error,\"Error extracting content: b'&\\x9bvW{\\xd3\\xe4\\x931q\\xa4w\\xf8NE\\xaa\\xf8V\\x1aq+\\x8b\\xb01\\x8c\\xad\\xce\\xff\\x8c\\xe5\\xf7\\xdd5,|o_\\x95=o_\\x95)\\x0eq(t\\x16\\xcd=\\x959\\x84x(\\xaa\\x02\\xd7>h\\xc6[\\xd9\\x88\\xe3f\\xa5\\xee\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 29627, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28374, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452561, \"\"ack\"\": 4248002349, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:22:58  (1777400578) random_bytes=a05509d93b8c9989b25686a57c32900cfc3cc615444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"&\\\\\\\\x9bvW{\\\\\\\\xd3\\\\\\\\xe4\\\\\\\\x931q\\\\\\\\xa4w\\\\\\\\xf8NE\\\\\\\\xaa\\\\\\\\xf8V\\\\u001aq+\\\\\\\\x8b\\\\\\\\xb01\\\\\\\\x8c\\\\\\\\xad\\\\\\\\xce\\\\\\\\xff\\\\\\\\x8c\\\\\\\\xe5\\\\\\\\xf7\\\\\\\\xdd5,|o_\\\\\\\\x95=o_\\\\\\\\x95)\\\\u000eq(t\\\\u0016\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:58.830605,107,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=4248002349 Ack=2233452684,525400577f945254007bb79208004500002876ad400080062c5fc0a87aa8bc726000c3c301bbfd335f2d851fc88c5011201457de0000,\"RT.W..RT.{....E..(v.@...,_..z..r`......3_-....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30381, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11359, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002349, \"\"ack\"\": 2233452684, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.830692,108,TCP 188.114.96.0:443 -> 192.168.122.168:50115,188.114.96.0,192.168.122.168,443,50115,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2233452684 Ack=4248002350,5254007bb792525400577f9408004500002873bc400040066f50bc726000c0a87aa801bbc3c3851fc88cfd335f2e5011005357de0000,RT.{..RT.W....E..(s.@.@.oP.r`...z..........3_.P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 29628, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 28496, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50115, \"\"seq\"\": 2233452684, \"\"ack\"\": 4248002350, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.830814,109,TCP 192.168.122.168:50115 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50115,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4248002350 Ack=2233452685,525400577f945254007bb79208004500002876ae400080062c5ec0a87aa8bc726000c3c301bbfd335f2e851fc88d5010201457de0000,\"RT.W..RT.{....E..(v.@...,^..z..r`......3_.....P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30382, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11358, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50115, \"\"dport\"\": 443, \"\"seq\"\": 4248002350, \"\"ack\"\": 2233452685, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:58.837553,110,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d29e400080067035c0a87aa884e2f749c3b40050e1745377c9cc531850180400b8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p5..z....I...P.tSw..S.P.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53918, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497143, \"\"ack\"\": 3385611032, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:22:58.837584,111,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611032 Ack=3782497270,5254007bb792525400577f9408004500002838dc400040064a7784e2f749c0a87aa80050c3b4c9cc5318e17453f650100053b7970000,RT.{..RT.W....E..(8.@.@.Jw...I..z..P....S..tS.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14556, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19063, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611032, \"\"ack\"\": 3782497270, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:59.500500,112,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14557, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18757, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611032, \"\"ack\"\": 3782497270, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:22:59 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:22:59.502199,113,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=1066848450 Ack=0,525400577f945254007bb79208004500003476af400080062c51c0a87aa8bc726000c3c501bb3f96d0c2000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,Q..z..r`.....?...........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30383, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11345, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848450, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:22:59.502254,114,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2484098479 Ack=1066848451,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c5941055af3f96d0c38012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z.......U.?......dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098479, \"\"ack\"\": 1066848451, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:22:59.502339,115,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1066848451 Ack=2484098480,525400577f945254007bb79208004500002876b0400080062c5cc0a87aa8bc726000c3c501bb3f96d0c3941055b05010201457de0000,\"RT.W..RT.{....E..(v.@...,\\..z..r`.....?.....U.P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30384, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11356, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848451, \"\"ack\"\": 2484098480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:59.502822,116,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1066848451 Ack=2484098480,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,\"RT.W..RT.{....E..cv.@...+ ..z..r`.....?.....U.P. .Y.......6...2..i.v\tE...._!..\t\\...,...Y....;.ny\n....\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30385, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11040, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848451, \"\"ack\"\": 2484098480, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:57  (1775728137) random_bytes=45bcf714ef5f21a797095cb7e3852cb3dc8b599fa0c3ff3bd26e790d sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:22:59.502841,117,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2484098480 Ack=1066848766,5254007bb792525400577f94080045000028a4bb400040063e51bc726000c0a87aa801bbc3c5941055b03f96d1fe5010005357de0000,RT.{..RT.W....E..(..@.@.>Q.r`...z.......U.?...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42171, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15953, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098480, \"\"ack\"\": 1066848766, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:22:59.569445,118,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497270 Ack=3385611337,525400577f945254007bb792080045000028d29f4000800670b3c0a87aa884e2f749c3b40050e17453f6c9cc5449501003feb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tS...TIP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53919, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28851, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497270, \"\"ack\"\": 3385611337, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1022, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.146158,119,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2484098480 Ack=1066848766,Error,\"Error extracting content: b'\\xd3\\x1c\\xc2#\\xb6\\x02VK\\xb5~\\x96?\\xb3;#y\\xec:\\xd1\\x9cS\\x93\\xa4\\xf3y\\x0c\\xf2\\xa0\\xe6\\xde_\\x1f\\xfeC\"\"\\xcd\\xed\\x15\\x97\\xf8\\r@\\xb8\\xff\\xf7V][\\xb3!n6\\x14\\x14\\r\\xe75\\xdd\\xd0DM\\x86v\\x8dc\\x8e-\\xb8\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 42172, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15829, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098480, \"\"ack\"\": 1066848766, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:23:00  (1777400580) random_bytes=a1273468f774778906b7454b7f91ed918c891e77444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"\\\\\\\\xd3\\\\u001c\\\\\\\\xc2#\\\\\\\\xb6\\\\u0002VK\\\\\\\\xb5~\\\\\\\\x96?\\\\\\\\xb3;#y\\\\\\\\xec:\\\\u045cS\\\\\\\\x93\\\\\\\\xa4\\\\\\\\xf3y\\\\f\\\\\\\\xf2\\\\\\\\xa0\\\\\\\\xe6\\\\\\\\xde_\\\\u001f\\\\\\\\xfeC\\\\\\\"\"\\\\\\\\xcd\\\\\\\\xed\\\\u0015\\\\\\\\x97\\\\\\\\xf8\\\\r@\\\\\\\\xb8\\\\\\\\xff\\\\\\\\xf7V][\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:00.152957,120,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=1066848766 Ack=2484098603,525400577f945254007bb79208004500002876b2400080062c5ac0a87aa8bc726000c3c501bb3f96d1fe9410562b5011201457de0000,\"RT.W..RT.{....E..(v.@...,Z..z..r`.....?.....V+P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30386, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11354, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848766, \"\"ack\"\": 2484098603, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.153054,121,TCP 188.114.96.0:443 -> 192.168.122.168:50117,188.114.96.0,192.168.122.168,443,50117,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2484098603 Ack=1066848767,5254007bb792525400577f94080045000028a4bd400040063e4fbc726000c0a87aa801bbc3c59410562b3f96d1ff5011005357de0000,RT.{..RT.W....E..(..@.@.>O.r`...z.......V+?...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42173, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 15951, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50117, \"\"seq\"\": 2484098603, \"\"ack\"\": 1066848767, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.153205,122,TCP 192.168.122.168:50117 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50117,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1066848767 Ack=2484098604,525400577f945254007bb79208004500002876b3400080062c59c0a87aa8bc726000c3c501bb3f96d1ff9410562c5010201457de0000,\"RT.W..RT.{....E..(v.@...,Y..z..r`.....?.....V,P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30387, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11353, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50117, \"\"dport\"\": 443, \"\"seq\"\": 1066848767, \"\"ack\"\": 2484098604, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.317254,123,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d2a0400080067033c0a87aa884e2f749c3b40050e17453f6c9cc5449501803feb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p3..z....I...P.tS...TIP.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53920, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497270, \"\"ack\"\": 3385611337, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1022, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:23:00.317319,124,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611337 Ack=3782497397,5254007bb792525400577f9408004500002838de400040064a7584e2f749c0a87aa80050c3b4c9cc5449e174547550100053b7970000,RT.{..RT.W....E..(8.@.@.Ju...I..z..P....TI.tTuP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14558, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19061, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611337, \"\"ack\"\": 3782497397, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.734961,125,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f9408004500015938df40004006494384e2f749c0a87aa80050c3b4c9cc5449e174547550180053b8c80000485454502f312e3120323030204f4b0d0a446174653a205475652c2032382041707220323032362031383a32333a303020474d540d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203130340d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a507261676d613a206e6f2d63616368650d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a0d0a3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14559, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18755, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611337, \"\"ack\"\": 3782497397, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:23:00 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:23:00.736982,126,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=1572412259 Ack=0,525400577f945254007bb79208004500003476b4400080062c4cc0a87aa8bc726000c3c601bb5db91b63000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,L..z..r`.....]..c........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30388, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11340, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412259, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:00.737054,127,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2654325685 Ack=1572412260,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c69e35cbb55db91b648012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z......5..]..d...dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325685, \"\"ack\"\": 1572412260, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:00.737157,128,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1572412260 Ack=2654325686,525400577f945254007bb79208004500002876b5400080062c57c0a87aa8bc726000c3c601bb5db91b649e35cbb65010201457de0000,\"RT.W..RT.{....E..(v.@...,W..z..r`.....]..d.5..P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30389, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11351, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412260, \"\"ack\"\": 2654325686, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.737805,129,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=1572412260 Ack=2654325686,525400577f945254007bb79208004500016376b6400080062b1bc0a87aa8bc726000c3c601bb5db91b649e35cbb65018201459190000160301013601000132030169d7760ab8385cc133b8d737140fc706b9a73aad9f680c17b33f0d3876cf86f300000ec00ac009c014c0130035002f000a010000fb0000001800160000137265616c6c796672656567656f69702e6f7267000a00080006001d00170018000b00020100002300c0168334713c1d2370c2d8321cd32fed7f29083530180fb4e70816062a0f1580975b098bfd0d4aa44918648244e9032c72d81e6a5432615b24fd4ed6de2e55a8a938adea3238a35c1bcba5385e8c1591d9ef3e39ae5b07f90e6c59465bc94956f4cfcfeaa25d9c9001dac96b74cd8bae425eeda4baefab7b5722f3254595d3e8a122e99292e531c2908eed19ac46599d0473fa85bfcdad1456250e7c27b68c3f4e80bedb61c3f3041febf95d7412253518124d6656a06b0f016f7799af38dd3d5b00170000ff01000100,\"RT.W..RT.{....E..cv.@...+...z..r`.....]..d.5..P. .Y.......6...2..i.v\n.8\\.3..7......:..h...?\n8v.......\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30390, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11035, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412260, \"\"ack\"\": 2654325686, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:58  (1775728138) random_bytes=b8385cc133b8d737140fc706b9a73aad9f680c17b33f0d3876cf86f3 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:00.737830,130,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2654325686 Ack=1572412575,5254007bb792525400577f940800450000288b77400040065795bc726000c0a87aa801bbc3c69e35cbb65db91c9f5010005357de0000,RT.{..RT.W....E..(.w@.@.W..r`...z......5..]...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35703, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22421, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325686, \"\"ack\"\": 1572412575, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:00.774523,131,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497397 Ack=3385611642,525400577f945254007bb792080045000028d2a14000800670b1c0a87aa884e2f749c3b40050e1745475c9cc557a501003fdb7970000,RT.W..RT.{....E..(..@...p...z....I...P.tTu..UzP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53921, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28849, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497397, \"\"ack\"\": 3385611642, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1021, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.122674,132,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2654325686 Ack=1572412575,Error,\"Error extracting content: b'.\\xd7\\x82\\xc4Z\\xa1\\xc8J\\xbc\\xd0\\xd7\"\"\\xb8A\\x1eI\\x04\\x16a\\xbc \\x9dg\\x16\\xa1\\xae\\xfb\\xb3\\x9d\\x9b\\xeb\\xef\\xfd\\xb4|\\xf9\\x01\\xb5\\xcbG\\x9f\\x0c\\\\p\\xb0\\xfb\\xf6\\x1c\\xe3\\x94\\x90\\xfe\\xd8&2w\\x8d\\xd4\\x9a\\xc6\\x04U,Z\\xf5\\xe1%\\x18\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b'\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 35704, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22297, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325686, \"\"ack\"\": 1572412575, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:23:01  (1777400581) random_bytes=fde48dd381767554eb89951c77c4144ea41c10ca444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\".\\\\u05c2\\\\\\\\xc4Z\\\\\\\\xa1\\\\\\\\xc8J\\\\\\\\xbc\\\\\\\\xd0\\\\\\\\xd7\\\\\\\"\"\\\\\\\\xb8A\\\\u001eI\\\\u0004\\\\u0016a\\\\\\\\xbc \\\\\\\\x9dg\\\\u0016\\\\\\\\xa1\\\\\\\\xae\\\\\\\\xfb\\\\\\\\xb3\\\\\\\\x9d\\\\\\\\x9b\\\\\\\\xeb\\\\\\\\xef\\\\\\\\xfd\\\\\\\\xb4|\\\\\\\\xf9\\\\u0001\\\\\\\\xb5\\\\\\\\xcbG\\\\\\\\x9f\\\\f\\\\\\\\p\\\\\\\\xb0\\\\\\\\xfb\\\\\\\\xf6\\\\u001c\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:01.131759,133,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=1572412575 Ack=2654325809,525400577f945254007bb79208004500002876b7400080062c55c0a87aa8bc726000c3c601bb5db91c9f9e35cc315011201457de0000,\"RT.W..RT.{....E..(v.@...,U..z..r`.....]....5.1P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30391, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11349, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412575, \"\"ack\"\": 2654325809, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.131848,134,TCP 188.114.96.0:443 -> 192.168.122.168:50118,188.114.96.0,192.168.122.168,443,50118,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2654325809 Ack=1572412576,5254007bb792525400577f940800450000288b79400040065793bc726000c0a87aa801bbc3c69e35cc315db91ca05011005357de0000,RT.{..RT.W....E..(.y@.@.W..r`...z......5.1]...P..SW...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35705, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 22419, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50118, \"\"seq\"\": 2654325809, \"\"ack\"\": 1572412576, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.131973,135,TCP 192.168.122.168:50118 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50118,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=1572412576 Ack=2654325810,525400577f945254007bb79208004500002876b8400080062c54c0a87aa8bc726000c3c601bb5db91ca09e35cc325010201457de0000,\"RT.W..RT.{....E..(v.@...,T..z..r`.....]....5.2P. .W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30392, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11348, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50118, \"\"dport\"\": 443, \"\"seq\"\": 1572412576, \"\"ack\"\": 2654325810, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.149003,136,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,PA,,http://checkip.dyndns.org/,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /,525400577f945254007bb7920800450000a7d2a2400080067031c0a87aa884e2f749c3b40050e1745475c9cc557a501803fdb8160000474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e323b202e4e455420434c52312e302e333730353b290d0a486f73743a20636865636b69702e64796e646e732e6f72670d0a0d0a,\"RT.W..RT.{....E.....@...p1..z....I...P.tTu..UzP.......GET / HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\nHost: checkip.dyndns.org\n\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 167, \"\"id\"\": 53922, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28721, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497397, \"\"ack\"\": 3385611642, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 47126, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"checkip.dyndns.org\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-28 18:23:01.149039,137,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611642 Ack=3782497524,5254007bb792525400577f9408004500002838e0400040064a7384e2f749c0a87aa80050c3b4c9cc557ae17454f450100053b7970000,RT.{..RT.W....E..(8.@.@.Js...I..z..P....Uz.tT.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14560, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19059, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611642, \"\"ack\"\": 3782497524, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.851787,138,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 345, \"\"id\"\": 14561, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 18753, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611642, \"\"ack\"\": 3782497524, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 47304, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": \"\"no-cache\"\", \"\"Connection\"\": \"\"keep-alive\"\", \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"104\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"text/html\"\", \"\"Date\"\": \"\"Tue, 28 Apr 2026 18:23:01 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": \"\"no-cache\"\", \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": null}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"\"}}]\"\n2026-04-28 18:23:01.853166,139,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=4216924951 Ack=0,525400577f945254007bb79208004500003476b9400080062c47c0a87aa8bc726000c3c701bbfb592b17000000008002faf057ea0000020405b40103030801010402,\"RT.W..RT.{....E..4v.@...,G..z..r`......Y+.........W...............\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 30393, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11335, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216924951, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:01.853245,140,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2541583211 Ack=4216924952,5254007bb792525400577f94080045000034000040004006e300bc726000c0a87aa801bbc3c7977d7b6bfb592b188012a56457ea0000020405b40101040201030309,RT.{..RT.W....E..4..@.@....r`...z......}{k.Y+....dW..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58112, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583211, \"\"ack\"\": 4216924952, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 22506, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:01.853402,141,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4216924952 Ack=2541583212,525400577f945254007bb79208004500002876ba400080062c52c0a87aa8bc726000c3c701bbfb592b18977d7b6c5010040257de0000,\"RT.W..RT.{....E..(v.@...,R..z..r`......Y+..}{lP...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30394, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11346, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216924952, \"\"ack\"\": 2541583212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.854101,142,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4216924952 Ack=2541583212,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,\"RT.W..RT.{....E..cv.@...+...z..r`......Y+..}{lP...Y.......6...2..i.v..T.1[......{..V..eK.............\n.\t.....5./.\n.............reallyfreegeoip.org.\n.................#....4q<.#p..2../..).50.......*....[\t..\nJ.I.d.D..,r..jT2a[$.N...U..8..28.\\...8^.....>9.[...lYF[.IV.....].....kt...B^.....{W\"\".%E....\"\"....1......FY..s......V%.|'..?N...a......]t.%5..MfV.k..ow..8.=[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 355, \"\"id\"\": 30395, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11030, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216924952, \"\"ack\"\": 2541583212, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 310, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=306 version=TLS 1.0 gmt_unix_time=Thu, 09 Apr 2026 09:48:59  (1775728139) random_bytes=0b5487315bd5c9ba0be9857b99055617a1654b1e8cee1b02bdea96f8 sidlen=0 sid=b'' cipherslen=14 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=251 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'reallyfreegeoip.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SessionTicket  type=session_ticket len=192 ticket=b'\\\\x16\\\\x834q<\\\\x1d#p\\\\xc2\\\\xd82\\\\x1c\\\\xd3/\\\\xed\\\\x7f)\\\\x0850\\\\x18\\\\x0f\\\\xb4\\\\xe7\\\\x08\\\\x16\\\\x06*\\\\x0f\\\\x15\\\\x80\\\\x97[\\\\t\\\\x8b\\\\xfd\\\\rJ\\\\xa4I\\\\x18d\\\\x82D\\\\xe9\\\\x03,r\\\\xd8\\\\x1ejT2a[$\\\\xfdN\\\\xd6\\\\xde.U\\\\xa8\\\\xa98\\\\xad\\\\xea28\\\\xa3\\\\\\\\\\\\x1b\\\\xcb\\\\xa58^\\\\x8c\\\\x15\\\\x91\\\\xd9\\\\xef>9\\\\xae[\\\\x07\\\\xf9\\\\x0elYF[\\\\xc9IV\\\\xf4\\\\xcf\\\\xcf\\\\xea\\\\xa2]\\\\x9c\\\\x90\\\\x01\\\\xda\\\\xc9kt\\\\xcd\\\\x8b\\\\xaeB^\\\\xed\\\\xa4\\\\xba\\\\xef\\\\xab{W\\\"\"\\\\xf3%E\\\\x95\\\\xd3\\\\xe8\\\\xa1\\\"\"\\\\xe9\\\\x92\\\\x92\\\\xe51\\\\xc2\\\\x90\\\\x8e\\\\xed\\\\x19\\\\xacFY\\\\x9d\\\\x04s\\\\xfa\\\\x85\\\\xbf\\\\xcd\\\\xad\\\\x14V%\\\\x0e|\\\\'\\\\xb6\\\\x8c?N\\\\x80\\\\xbe\\\\xdba\\\\xc3\\\\xf3\\\\x04\\\\x1f\\\\xeb\\\\xf9]t\\\\x12%5\\\\x18\\\\x12MfV\\\\xa0k\\\\x0f\\\\x01ow\\\\x99\\\\xaf8\\\\xdd=[' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:01.854123,143,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2541583212 Ack=4216925267,5254007bb792525400577f94080045000028fcb640004006e655bc726000c0a87aa801bbc3c7977d7b6cfb592c535010005357de0000,\"RT.{..RT.W....E..(..@.@..U.r`...z......}{l.Y,SP..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64694, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58965, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583212, \"\"ack\"\": 4216925267, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:01.973483,144,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497524 Ack=3385611947,525400577f945254007bb792080045000028d2a34000800670afc0a87aa884e2f749c3b40050e17454f4c9cc56ab50100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tT...V.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53923, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28847, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497524, \"\"ack\"\": 3385611947, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:02.256651,145,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2541583212 Ack=4216925267,Error,Error extracting content: b'3u/xI\\xc2h\\xe3{yQ\\xd1\\x00f\\xc5\\xa1|1\\xe8\\xfe\\xcf?\\xea@\\x0b\\xa1\\xf6\\x95\\xbb\\r\\x0384\\xd8GBO\\xa3\\xc3kM\\xf2\\x0b\\x9c\\x12W\\x9dl\\xcb\\x84\\x16^\\x15Y\\xc7\\x90\\x9b\\x15\\xc5c\\xdf\\x01+\\xf9\\xb7Z\\x8a\\xe0\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b\\x0b',,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 163, \"\"id\"\": 64695, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58841, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583212, \"\"ack\"\": 4216925267, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22617, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 59, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=55 version=TLS 1.0 gmt_unix_time=Tue, 28 Apr 2026 18:23:02  (1777400582) random_bytes=23d9533319dd33a0ce3a95da224fc735ffd38faa444f574e47524400 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA comp=null extlen=15 ext=[<TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 769, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 769, \"\"len\"\": 48, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"{\\\"\"load\\\"\": \\\"\"3u/xI\\\\\\\\xc2h\\\\\\\\xe3{yQ\\\\\\\\xd1\\\\u0000f\\\\u0161|1\\\\\\\\xe8\\\\\\\\xfe\\\\\\\\xcf?\\\\\\\\xea@\\\\u000b\\\\\\\\xa1\\\\\\\\xf6\\\\\\\\x95\\\\\\\\xbb\\\\r\\\\u000384\\\\\\\\xd8GBO\\\\\\\\xa3\\\\\\\\xc3kM\\\\\\\\xf2\\\\u000b\\\\\\\\x9c\\\\u0012W\\\\\\\\x9dl\\\"\"}\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:02.263233,146,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216925267 Ack=2541583335,525400577f945254007bb79208004500002876bc400080062c50c0a87aa8bc726000c3c701bbfb592c53977d7be75011040257de0000,\"RT.W..RT.{....E..(v.@...,P..z..r`......Y,S.}{.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30396, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11344, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216925267, \"\"ack\"\": 2541583335, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:02.263412,147,TCP 188.114.96.0:443 -> 192.168.122.168:50119,188.114.96.0,192.168.122.168,443,50119,TCP,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2541583335 Ack=4216925268,5254007bb792525400577f94080045000028fcb840004006e653bc726000c0a87aa801bbc3c7977d7be7fb592c545011005357de0000,\"RT.{..RT.W....E..(..@.@..S.r`...z......}{..Y,TP..SW...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64696, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58963, \"\"src\"\": \"\"188.114.96.0\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50119, \"\"seq\"\": 2541583335, \"\"ack\"\": 4216925268, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:02.263481,148,TCP 192.168.122.168:50119 -> 188.114.96.0:443,192.168.122.168,188.114.96.0,50119,443,TCP,Internal,Private Network,,,,,,Unknown,Unknown,13335,\"Cloudflare, Inc.\",,,188.114.96.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=4216925268 Ack=2541583336,525400577f945254007bb79208004500002876bd400080062c4fc0a87aa8bc726000c3c701bbfb592c54977d7be85010040257de0000,\"RT.W..RT.{....E..(v.@...,O..z..r`......Y,T.}{.P...W...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 30397, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11343, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"188.114.96.0\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50119, \"\"dport\"\": 443, \"\"seq\"\": 4216925268, \"\"ack\"\": 2541583336, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 22494, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:04.708655,149,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=902238386 Ack=0,525400577f945254007bb79208004500003406dd400080067c8dc0a87aa8959aa66ec3c801bb35c710b2000000008002faf077800000020405b40103030801010402,RT.W..RT.{....E..4..@...|...z....n....5...........w...............,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1757, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31885, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238386, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 30592, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:04.708715,150,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=4075040321 Ack=902238387,5254007bb792525400577f94080045000034000040004006c36a959aa66ec0a87aa801bbc3c8f2e42e4135c710b38012a56477800000020405b40101040201030309,RT.{..RT.W....E..4..@.@..j...n..z........A5......dw..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 50026, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075040321, \"\"ack\"\": 902238387, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 30592, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:04.708829,151,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902238387 Ack=4075040322,525400577f945254007bb79208004500002806de400080067c98c0a87aa8959aa66ec3c801bb35c710b3f2e42e425010201477740000,RT.W..RT.{....E..(..@...|...z....n....5......BP. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1758, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31896, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238387, \"\"ack\"\": 4075040322, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:04.709588,152,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=902238387 Ack=4075040322,525400577f945254007bb7920800450000da06df400080067be5c0a87aa8959aa66ec3c801bb35c710b3f2e42e42501820147826000016030300ad010000a9030369d7760e45802025e33596b91ff49369ea2ff44b12df8e196c4cfbcd4b272a3200002ac02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000560000001500130000106170692e74656c656772616d2e6f7267000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\"RT.W..RT.{....E.....@...{...z....n....5......BP. .x&.............i.v.E. %.5.....i./.K....lL..K'*2..*.,.+.0./.....$.#.(.'.\n.\t.........=.<.5./.\n...V.........api.telegram.org.\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 218, \"\"id\"\": 1759, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31717, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238387, \"\"ack\"\": 4075040322, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30758, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 173, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=169 version=TLS 1.2 gmt_unix_time=Thu, 09 Apr 2026 09:49:02  (1775728142) random_bytes=45802025e33596b91ff49369ea2ff44b12df8e196c4cfbcd4b272a32 sidlen=0 sid=b'' cipherslen=42 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=86 ext=[<TLS_Ext_ServerName  type=server_name len=21 servernameslen=19 servernames=[b'api.telegram.org'] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:04.709613,153,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4075040322 Ack=902238565,5254007bb792525400577f94080045000028ba25400040060951959aa66ec0a87aa801bbc3c8f2e42e4235c711655010005377740000,RT.{..RT.W....E..(.%@.@.\tQ...n..z........B5..eP..Swt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47653, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2385, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075040322, \"\"ack\"\": 902238565, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.124668,154,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > Padding,5,TCP PA Seq=4075040322 Ack=902238565,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,\"RT.{..RT.W....E.\n..&@.@......n..z........B5..eP..S........E...A...>.v..........'....mGP..DOWNGRD.../.....................#..........O...K..H...0...0.........\t..>$.=\t..0\n.\t*.H..\n.....0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20..\n251111151409Z.\n261213151409Z0.1.0...U....api.telegram.org0..\"\"0\n.\t*.H..\n..........0..\n.........\\W..e..x...X/.Z.nI..W...x..<@<!....3..B....s...r97#.V.C.q..$.9..XS..*B.N-.2....*........EXz..E.#..T...I...!.)m...9:.5...G...\t.....r0.I..1|..+)...Ar^5...\"\".Hv0m....).p....kX..s...y..._g.y..%....0..K\\..L.Q....~....5...7...s.n=.v..t.=.,../f.D.'?.........8.........I0..E0...U.......0.0...U.%..0...+.........+.......0...U...........09..U...2000..,.*.(http://crl.godaddy.com/gdig2s1-68200.crl0]..U. .V0T0...g.....0H..`.H...m....0907..+........+http://certificates.godaddy.com/repository/0v..+........j0h0$..+.....0...http://ocsp.godaddy.com/0@..+.....0..4http://certificates.godaddy.com/repository/gdig2.crt0...U.#..0...@..'..4.0.3..l...,..01..U...*0(..api.telegram.org..www.api.telegram.org0...U...............!...6\\(w0..0....\n+.....y......o...k.i.v..m}....w..._......3Ze....s....iw....s{FW.....G0E.!...2..%tgoK.Bb.....%.....u........ V-...G.L.fN...u.Q>|I%T..z../7..I.v..1~WE..E..8...A...!Z\"\".....v...R.....s{G......G0E.!...........Bh3........U......D.... Dw.._....b..x.m.\t?......7.`.9x6..w..8...|..D_[....n..Y.G\ni.......X.....s{Hn.....H0F.!...O.d....}..G..\"\"&op...4...x@os+..!...>.B.N..6.ST},8.....\"\"..<V......0\n.\t*.H..\n..........N:.x....-...@....\n...JV_....L..L..=.....i$C<BeXk.A.K...P.j...UGx-V..f9...9g.|./O.T.{..8..>....\\W.;fi........,).....a...?..l..E.?*.~.*.Y.G;..`...#.u....Z....c.P..\n.`..EN.`Y.:..z...A....xn..| ,.q...|r....Yb\tA......Z.B...........O.......8\n=....O..}....VL$..S8...0...0...........0\n.\t*.H..\n.....0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\n110503070000Z.\n310503070000Z0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...*Go Daddy Secure Certificate Authority - G20..\"\"0\n.\t*.H..\n..........0..\n...........v...b.0d...l...b../.>e...b.<R...EKU.xkc.b...il.....L.E3......+..a.yW....?0<]G.....7.AQ..KT.(.....08...&.fGcm.q&G.8GS.F......E...q..o....0:yO_LG...[...`;..C...3N...'O.%........t.dW..DU.-*:>....2\n..d..:P.J..y3.. .....9.i.lcR.w...t.....PT5KiN.;.I.....R..........0...0...U.......0....0...U...........0...U......@..'..4.0.3..l...,..0...U.#..0...:....g(.....An .....04..+........(0&0$..+.....0...http://ocsp.godaddy.com/05..U....0,0*.(.&.$http://crl.godaddy.com/gdroot-g2.crl0F..U. .?0=0;..U. .0301..+........%https://certs.godaddy.com/repository/0\n.\t*.H..\n...........~l...8....K.._O..l>....P..s.W1..../....[....yb....jcs1...H.;.-.]...|%O.V0..D.{,..^...a...*......}.C.D..p\n.......`..r.s$...\"\"....bXD...%......b.Q...Q*...s.v.6....,....*...Mu..?.A.#}[K...X.F..``..}PA......../..T.D..\n...3..-v6&.....a....o.F.(..&}\n\t.........0....0...0...........0\n.\t*.H..\n.....0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\n090901000000Z.\n371231235959Z0..1.0\t..U....US1.0...U....Arizona1.0...U...\nScottsdale1.0...U.\n..GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20..\"\"0\n.\t*.H..\n..........0..\n......qb...Y4.......IX.\"\"....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 47654, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 64503, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075040322, \"\"ack\"\": 902238565, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 33996, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 69, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=65 version=TLS 1.2 gmt_unix_time=Sun, 06 Jan 2069 03:03:18  (3124666998) random_bytes=d71ec2b3ad03d805e6ca2784e7af936d4750ad94444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 comp=null extlen=25 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-28 18:23:05.124903,155,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902238565 Ack=4075043738,525400577f945254007bb79208004500002806e0400080067c96c0a87aa8959aa66ec3c801bb35c71165f2e43b9a5010201477740000,RT.W..RT.{....E..(..@...|...z....n....5..e..;.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1760, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31894, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238565, \"\"ack\"\": 4075043738, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.304330,156,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=4075043738 Ack=902238565,5254007bb792525400577f940800450003a8ba294000400605cd959aa66ec0a87aa801bbc3c8f2e43b9a35c71165501800537af400002043013b84f1e685499f27eaf6841b4ea0b4db7098c73201b1053e074eeef4fa4f2f593022e7ab19566be28007fcf316758039517be5f935b6744ea98d8213e4b63fa90383faa2be8a156a7fde0bc3b6191405caeac3a804943b467c320df3006622c88d696d368c1118b7d3b21c60b438fa028cced3dd4607de0a3eeb5d7cc87cfbb02b53a4926269512505611a44818c2ca9439623dfac3a819a0e29c51ca9e95d1eb69e9e300a39cef18880fb4b5dcc32ec85624325340256270191b43b702a3f6eb1e89c88017d9fd4f9db536d609dbf2ce758abb85f46fccec41b033c09eb49315c6946b3e0470203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e041604143a9a8507106728b6eff6bd05416e20c194da0fde300d06092a864886f70d01010b0500038201010099db5d79d5f99759670361f17e3b0631752da1208e4f6587b4f7a69cbcd8e92fd0db5aeecf748c73b43842da057bf80275b8fda5b1d7aef6d7de13cb53107e8a46d197fab72e2b11ab90b02780f9e89f5ae9379fabe4df6cb385179d3dd9244f799135d65f04eb8083ab9a022db510f4d890c7047340ed7225a0a99fec9eab68129957c68f123a09a4bd44fd061537c19be432a3ed38e8d864f32c7e14fc02ea9fcdff076817db2290382d7a8dd154f169e35f33ca7a3d7b0ae3ca7f5f39e5e275bac5761833ce2cf02f4cadf7b1e7ce4fa8c49b4a5406c57f7dd5080fe21cfe7e17b8ac5ef6d416b243090c4df6a76bb4998465ca7a88e2e244be5cf7ea1cf5160303012c0c00012803001d203aafbe4c872864f900b970762d0acf10ec1367686803d0f7e9a96333737b6f2f080401005b2c874dd5c61b3409bf6adc5c03066ba830adb2a63252d31d0e7b1ac34f1a23a78ac8015beb06726f2e4c23bcaec0efc745db786ab95ab552bfdb369cb8a0f2439f9264b7777e78d73ebfa2ce5dbad52590d88b7af8fcc8831bc86cced8bd567b286613851890205d341aa712868b306d957c6bfa1290a80ad5aa65ed18cbf142028e4797704cfc50787164cb2322bee68ed0f172e22c42c4fec0b097a8c801b4b6536f1bc254c63c18529a670d3b2074817c5c8b1d3b7e050993a737025a07f71261a4fa3f76335a7bdd12b54b2e5cd2bceb8ac6d9769c949532cc8337730f7ca2d57a2220a3591117c683b6e14008d1ff11f7c5a9e0f1c825acbe92d65c6e16030300040e000000,\" C.;....I.'....N...p..2...>.N...O/Y0\"\"...Vk......u.9Q{..5.tN......?........j..............;F|2\n..f\"\"..im6.......`.8......F..\n>.]|.|..+S..biQ%.a.D..,.C.#..:...)....]....0\n9.....K].2..bC%4.V'...;p*?n.....}....Sm`..,.X.._F.....<\t.I1\\iF..G......B0@0...U.......0....0...U...........0...U......:....g(.....An .....0\n.\t*.H..\n............]y...Yg.a.~;.1u-. .Oe......../..Z..t.s.8B..{..u...........S.~.F.....+....'....Z.7....l....=.$Oy.5._.......-.......s@.r%......h..W...:\t..D...7...2..8..d.,~........h..\"\".8-z..T.i._3.z={\n..._9..u..v.3.,./L.....O...JT...}......~...^....C\t.M..k...e.z...D.\\........,...(... :..L.(d...pv-\n....ghh.....c3s{o/....[,.M...4\t.j.\\..k.0...2R...{..O.#....[..ro.L#.....E.xj.Z.R..6....C..d.w~x.>...]..%...z......l...V{(f.... ]4.....0m.|k....\n..e....B..G.pL.Pxqd.#\"\".....r.,B..........So..T.<.R.g\n; t.|\\..;~.\t..7.Z...a..?v3Z{...K.\\......v...2..7s.|..z\"\" .Y......@..........%....\\n.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 936, \"\"id\"\": 47657, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1485, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075043738, \"\"ack\"\": 902238565, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31476, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-04-28 18:23:05.324448,157,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=902238565 Ack=4075044634,525400577f945254007bb79208004500008506e1400080067c38c0a87aa8959aa66ec3c801bb35c71165f2e43f1a5018201177d1000016030300251000002120c0b48c554b5e79939451754eb4f25aa46b912390a18ebf5d685de2780dc7786a14030300010116030300280000000000000000b740a73528564d0e8b43f11839769a793f63d1a5457f3d5909b129551248e079,\" ...UK^y..QuN..Z.k.#....]h].x\n.xj\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 133, \"\"id\"\": 1761, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238565, \"\"ack\"\": 4075044634, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8209, \"\"chksum\"\": 30673, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 37, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=33 exchkeys=<Raw  load=b' \\\\xc0\\\\xb4\\\\x8cUK^y\\\\x93\\\\x94QuN\\\\xb4\\\\xf2Z\\\\xa4k\\\\x91#\\\\x90\\\\xa1\\\\x8e\\\\xbf]h]\\\\xe2x\\\\r\\\\xc7xj' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'\\\\xb7@\\\\xa75(VM\\\\x0e\\\\x8bC\\\\xf1\\\\x189v\\\\x9ay?c\\\\xd1\\\\xa5E\\\\x7f=Y\\\\t\\\\xb1)U\\\\x12H\\\\xe0y' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.324510,158,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4075044634 Ack=902238658,5254007bb792525400577f94080045000028ba2a40004006094c959aa66ec0a87aa801bbc3c8f2e43f1a35c711c25010005377740000,RT.{..RT.W....E..(.*@.@.\tL...n..z.......?.5...P..Swt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47658, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2380, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044634, \"\"ack\"\": 902238658, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.685178,159,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=4075044634 Ack=902238658,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,v.nu].L..u...O........_gk.;.>....q...J7.,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 47659, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2105, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044634, \"\"ack\"\": 902238658, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 30854, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=600 ticketlen=208 ticket=b'OI\\\\x13%\\\\xf5\\\\x8f\\\\x11\\\\xfa\\\\x03\\\\xab\\\\x8c\\\\x1e#\\\\xb6\\\\xc0\\\\xf7\\\\x96\\\\xa4\\\\xd8@V\\\\xf4H\\\\x98\\\\xe2\\\\xe8\\\\x8c\\\\xc6k\\\\x1e\\\\x8c\\\\x887V\\\\x90\\\\xbbog\\\\x97[\\\\xc3\\\"\"\\\\xe7\\\\xef/c\\\\xc4\\\\xd4j\\\\xda\\\\x0f\\\\xcf\\\\x9cM\\\\x809\\\\xca\\\\xee\\\\xd9\\\\xe3\\\\xff\\\\xefI\\\\xffF\\\\xf38\\\\xfbpT\\\\x7fOy`x-\\\\xf7\\\\x82wrT\\\\xa4\\\\xd4Dx\\\\xfe\\\\xc3\\\\xc1\\\\x85?\\\\xadl\\\\xd3\\\\xea\\\\xfd\\\\x0b\\\\x17\\\\x8a\\\\x9eW\\\\xa6\\\\xa2\\\\x80\\\\x0e\\\\x89\\\\xdc\\\\x1bz\\\\x04\\\\xefIo\\\\xafb\\\\x18\\\\xf5E\\\\xd9\\\\xe7\\\\x08\\\\xae\\\\r\\\\x00\\\\xbfx\\\\xed\\\\x0f\\\\x03\\\\xab\\\\x12\\\\xcd\\\\x84\\\\xfb\\\\xbc\\\\xb3\\\\xe2\\\\xcc \\\\xb4.y\\\\xd3\\\\xf5y\\\\x82SzZc\\\\xac\\\\xc5\\\\xcfX\\\\xceSD{N\\\\xc5RN\\\\xff\\\\x07\\\\xbf\\\\xbb\\\\xc1Q!AVB9u\\\\x02\\\\xd8\\\\xa1\\\\x9a(\\\\xea\\\\xe9.\\\\xf9;\\\\x1b \\\\x1aQ\\\\x1f\\\\xd87\\\\xce\\\\x82l\\\\xaa\\\\x19\\\\x90_0\\\\xda\\\\x99\\\\xbe\\\\xe9\\\\x18 \\\\x0b\\\\x87\\\\x0e4' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'v\\\\xe0nu]\\\\xd0L\\\\x94\\\\xd3u\\\\xaf\\\\xbe\\\\xefO\\\\x85\\\\xb4\\\\xdb\\\\xf9\\\\x94\\\\x8e\\\\xaf\\\\xb5_gk\\\\xde;\\\\xf1>\\\\xf4\\\\x17\\\\x91\\\\xb1q\\\\x13\\\\x92\\\\xf1J7\\\\xad' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.694893,160,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=902238658 Ack=4075044908,525400577f945254007bb7920800450001a506e2400080067b17c0a87aa8959aa66ec3c801bb35c711c2f2e4402c5018200f78f10000170303017800000000000000016ad7f5feca52a316c4af342eae4bc809d83de4b1a7bb57f6b2c8c95dbd0ffad9faf69bd87eca0bb588f8cef6f8b568382b1cc9af28ca505f6bbe2e5a280df7902a8923ca84857d5e85af2f52789d8e270732d95e19c400695ca38c82c7b2264a3154244e9ff18957b7a7f56a13d331f14a6922be853aacd6fe67fb340e36c2ad468e1055446158bb6d1b9866e67f3ed85f9705b04b570a8075fb4c830343f452ad2a77489f7a77131ae46779e60ef1b9a36617a0e95f17e6a13cadd4e1383d6e9b8d7e680a53f85797fbb5303ba75b5baecba5c441f774212a31b12591570ccc3af66c3718ef62919cfba0f4f40981ba1148cfcf7a05c59596c0947fe32f840944b0947ee3c258ed0a09bfcd0b80b66af61a4c21d300fd4e691130d0f30780daa49b3da154e7af6d0fb9ed456b4e140915f4937c22420636325910b02963646acbf521ca665084b28f7b855b852a281d678dab50104c296d9b99dd3b7f98f38a9b678c52d100c5a3cb163ca06878edb1,\"RT.W..RT.{....E.....@...{...z....n....5.....@,P. .x.......x........j....R....4..K.\t.=....W....]........~.........h8+...(.P_k..Z(\n..*.#...}^../Rx..'.2.^...i\\.....&J1T$N...W...j..1.Ji\"\"..:...g.4.6..F..UDaX.m..f..>._...KW\n.u.L..C.R.*wH.zw...gy.....f..._...<...8=n..~h\nS.W...0;.[[....A.t!*1.%.W..:.l7..b......\t...H..z......../.\tD..~..X.\n\t.....j..L!...Ni.0.......=.T..m...EkN.\t...|\"\"B.62Y..)cdj..!.fP...{.[.*(.g..P.L)m...;.....g.R......<.hx..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 421, \"\"id\"\": 1762, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31511, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902238658, \"\"ack\"\": 4075044908, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8207, \"\"chksum\"\": 30961, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 376, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01j\\\\xd7\\\\xf5\\\\xfe\\\\xcaR\\\\xa3\\\\x16\\\\xc4\\\\xaf4.\\\\xaeK\\\\xc8\\\\t\\\\xd8=\\\\xe4\\\\xb1\\\\xa7\\\\xbbW\\\\xf6\\\\xb2\\\\xc8\\\\xc9]\\\\xbd\\\\x0f\\\\xfa\\\\xd9\\\\xfa\\\\xf6\\\\x9b\\\\xd8~\\\\xca\\\\x0b\\\\xb5\\\\x88\\\\xf8\\\\xce\\\\xf6\\\\xf8\\\\xb5h8+\\\\x1c\\\\xc9\\\\xaf(\\\\xcaP_k\\\\xbe.Z(\\\\r\\\\xf7\\\\x90*\\\\x89#\\\\xca\\\\x84\\\\x85}^\\\\x85\\\\xaf/Rx\\\\x9d\\\\x8e\\\\'\\\\x072\\\\xd9^\\\\x19\\\\xc4\\\\x00i\\\\\\\\\\\\xa3\\\\x8c\\\\x82\\\\xc7\\\\xb2&J1T$N\\\\x9f\\\\xf1\\\\x89W\\\\xb7\\\\xa7\\\\xf5j\\\\x13\\\\xd31\\\\xf1Ji\\\"\"\\\\xbe\\\\x85:\\\\xac\\\\xd6\\\\xfeg\\\\xfb4\\\\x0e6\\\\xc2\\\\xadF\\\\x8e\\\\x10UDaX\\\\xbbm\\\\x1b\\\\x98f\\\\xe6\\\\x7f>\\\\xd8_\\\\x97\\\\x05\\\\xb0KW\\\\n\\\\x80u\\\\xfbL\\\\x83\\\\x03C\\\\xf4R\\\\xad*wH\\\\x9fzw\\\\x13\\\\x1a\\\\xe4gy\\\\xe6\\\\x0e\\\\xf1\\\\xb9\\\\xa3f\\\\x17\\\\xa0\\\\xe9_\\\\x17\\\\xe6\\\\xa1<\\\\xad\\\\xd4\\\\xe18=n\\\\x9b\\\\x8d~h\\\\nS\\\\xf8W\\\\x97\\\\xfb\\\\xb50;\\\\xa7[[\\\\xae\\\\xcb\\\\xa5\\\\xc4A\\\\xf7t!*1\\\\xb1%\\\\x91W\\\\x0c\\\\xcc:\\\\xf6l7\\\\x18\\\\xefb\\\\x91\\\\x9c\\\\xfb\\\\xa0\\\\xf4\\\\xf4\\\\t\\\\x81\\\\xba\\\\x11H\\\\xcf\\\\xcfz\\\\x05\\\\xc5\\\\x95\\\\x96\\\\xc0\\\\x94\\\\x7f\\\\xe3/\\\\x84\\\\tD\\\\xb0\\\\x94~\\\\xe3\\\\xc2X\\\\xed\\\\n\\\\t\\\\xbf\\\\xcd\\\\x0b\\\\x80\\\\xb6j\\\\xf6\\\\x1aL!\\\\xd3\\\\x00\\\\xfdNi\\\\x110\\\\xd0\\\\xf3\\\\x07\\\\x80\\\\xda\\\\xa4\\\\x9b=\\\\xa1T\\\\xe7\\\\xafm\\\\x0f\\\\xb9\\\\xedEkN\\\\x14\\\\t\\\\x15\\\\xf4\\\\x93|\\\"\"B\\\\x0662Y\\\\x10\\\\xb0)cdj\\\\xcb\\\\xf5!\\\\xcafP\\\\x84\\\\xb2\\\\x8f{\\\\x85[\\\\x85*(\\\\x1dg\\\\x8d\\\\xabP\\\\x10L)m\\\\x9b\\\\x99\\\\xdd;\\\\x7f\\\\x98\\\\xf3\\\\x8a\\\\x9bg\\\\x8cR\\\\xd1\\\\x00\\\\xc5\\\\xa3\\\\xcb\\\\x16<\\\\xa0hx\\\\xed\\\\xb1' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.694940,161,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=4075044908 Ack=902239039,5254007bb792525400577f94080045000028ba2c40004006094a959aa66ec0a87aa801bbc3c8f2e4402c35c7133f5010005377740000,\"RT.{..RT.W....E..(.,@.@.\tJ...n..z.......@,5..?P..Swt..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47660, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2378, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044908, \"\"ack\"\": 902239039, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:05.888191,162,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=4075044908 Ack=902239039,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,\"RT.{..RT.W....E....-@.@......n..z.......@,5..?P..Sy%.......v.nu].L._..e3....U..I.*C...U.\n.....A.*....\\......U..%.3.c...V=.....L.s_\\.....d.`....I....d.$?......z....O..~t.....c.a.....o.t..h7L.I..=...]......?.....F-[4.....6...x..(...7.W)zM.!.)...u..z......h.>..gU].f.J..I...*.$.[.O..R...Rgt......T...8....\\[...z...`.....Q..|b....D.........N(..N....Z.rl....Hx.j.9hC..V,.\n..pT...$.....-Z.?ra~bv..........G.\t.o.. ..[......C...DD.I..3...j...8,:k.:...je..N.J*.h....)...;...BuHH-.@..5F..nN...=.E.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 473, \"\"id\"\": 47661, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1944, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075044908, \"\"ack\"\": 902239039, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31013, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 428, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'v\\\\xe0nu]\\\\xd0L\\\\x95_\\\\x9b\\\\xf7e3\\\\x0e\\\\xd6\\\\x9b\\\\xb3U\\\\xef\\\\xf8I\\\\xf5*C\\\\xc4\\\\x0c\\\\xd3U\\\\x96\\\\n\\\\xaf\\\\xed\\\\x17\\\\xeb\\\\xc0A\\\\xd5*\\\\xd0\\\\xae\\\\xf4\\\\xb5\\\\\\\\\\\\xae\\\\xcf\\\\xe9.\\\\x88\\\\xdbU\\\\xfb\\\\xe7%\\\\x7f3\\\\x0cc\\\\x8d\\\\xdb\\\\x91V=\\\\x8d\\\\xd0\\\\xed\\\\xf5\\\\xf0L\\\\x1fs_\\\\\\\\\\\\x82\\\\xf2\\\\xb8\\\\xc3\\\\x04d\\\\x0b`\\\\x01\\\\xac\\\\xeb\\\\xbeI\\\\xde\\\\x96\\\\xe1\\\\x82d\\\\x13$?\\\\xf6\\\\x18\\\\x07\\\\x0f\\\\x18\\\\xafz\\\\x9e\\\\xd1\\\\x02\\\\xa7O\\\\xeb\\\\xc7~t\\\\xce\\\\x8a\\\\xbd\\\\x8c\\\\xe7c\\\\xf0a\\\\xc9\\\\xa4\\\\x84\\\\x8c\\\\x94o\\\\xe6t\\\\x9c\\\\x9fh7L\\\\x08I\\\\x01\\\\xe7=\\\\xbb\\\\xb0\\\\x91]\\\\x05\\\\x95\\\\xdd\\\\xbe\\\\xd4\\\\xb9?\\\\xf4\\\\xe5\\\\x1f\\\\xde\\\\x05F-[4\\\\xcd\\\\xc5\\\\x83\\\\xa9\\\\xcc6\\\\xc6\\\\xc9\\\\xa4x\\\\xd1\\\\x8a(\\\\x1d\\\\xa2\\\\x937\\\\xb8W)zM\\\\xdb!\\\\xf2)\\\\x17\\\\x8c\\\\xc2u\\\\x84\\\\xa0z\\\\x88\\\\xac\\\\x00\\\\x0e\\\\xee\\\\xa3h\\\\xdd>\\\\xe4\\\\x94gU]\\\\xc0f\\\\xe8J\\\\xb4\\\\xe3I\\\\xe5\\\\x02\\\\xc4*\\\\xcc$\\\\xce[\\\\xc4O\\\\x07\\\\x02R\\\\xed\\\\xe7\\\\x97Rgt\\\\x10\\\\xbf\\\\x10\\\\xba\\\\xa8\\\\x15T\\\\xe9\\\\xb7\\\\x0b8\\\\x08\\\\xa4\\\\xdc\\\\xbb\\\\\\\\[\\\\x88\\\\x97\\\\xf6z\\\\xe8\\\\xd8\\\\x81`\\\\x14\\\\x0b\\\\xe2\\\\xf3\\\\x9bQ\\\\xcb\\\\x82|b\\\\x9a\\\\xb4\\\\xc4\\\\xe5D\\\\x9f\\\\x84\\\\xcf\\\\xac\\\\x01\\\\xbe\\\\x19\\\\xe2\\\\x80N(\\\\xbf\\\\xc0N\\\\x9b\\\\xdf\\\\xe2\\\\x9eZ\\\\xb5rl\\\\xfc\\\\xfc\\\\x9f\\\\x1aHx\\\\x10j\\\\xde9hC\\\\xf3\\\\xfcV,\\\\x85\\\\r\\\\x1d\\\\xa1pT\\\\x14\\\\xc9\\\\xb5$\\\\xc7\\\\x1f\\\\x13\\\\x86\\\\xfb-Z\\\\xa0?ra~bv\\\\xc6\\\\xed\\\\xc2\\\\x18\\\\xc1\\\\x16\\\\x05\\\\xd3\\\\xfa\\\\xa5G\\\\x9e\\\\t\\\\x1ao\\\\xba\\\\xe7 \\\\xae\\\\xf9[\\\\xb4\\\\xa4\\\\xb7\\\\x82\\\\x01\\\\xe8C\\\\xc4\\\\xd7\\\\xf1DD\\\\xc0I\\\\xe4\\\\x863\\\\xa0\\\\xaa\\\\x8bj\\\\xc6\\\\x19\\\\xe98,:k\\\\xfd:\\\\x87\\\\x1d\\\\xbdje\\\\x85\\\\x86N\\\\xadJ*\\\\x92h\\\\xbd\\\\x83\\\\xae\\\\xe6)\\\\x05\\\\x95\\\\xbf;\\\\x93\\\\xec\\\\xbcBuHH-\\\\x01@\\\\xa6\\\\xbc5F\\\\xf6\\\\xdenN\\\\xd7\\\\xba\\\\xcc=\\\\xacE\\\\xec' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-28 18:23:05.978378,163,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902239039 Ack=4075045341,525400577f945254007bb79208004500002806e3400080067c93c0a87aa8959aa66ec3c801bb35c7133ff2e441dd5010201477740000,RT.W..RT.{....E..(..@...|...z....n....5..?..A.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1763, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31891, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902239039, \"\"ack\"\": 4075045341, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.044914,164,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a19400080065cfdc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10777, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.045094,165,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a510400080067473c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...ts..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42256, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29811, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.050531,166,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592a4000800654ecc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y*@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22826, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21740, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.052597,167,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028faf74000800611d0c0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64247, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4560, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.052694,168,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280154400080062bfdc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.T@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 340, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11261, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.061058,169,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dc400080069f99c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40857, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372311,170,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a511400080067472c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tr..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42257, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29810, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372445,171,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028faf84000800611cfc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64248, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4559, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372465,172,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280155400080062bfcc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.U@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 341, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11260, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.372483,173,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812dd400080069f98c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40856, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.481693,174,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1a400080065cfcc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10778, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23804, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:08.481859,175,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592b4000800654ebc0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y+@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22827, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21739, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075432,176,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a512400080067471c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tq..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42258, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29809, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075568,177,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028faf94000800611cec0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64249, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4558, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075588,178,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280156400080062bfbc0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.V@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 342, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11259, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.075606,179,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812de400080069f97c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40855, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.182699,180,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1b400080065cfbc0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10779, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23803, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:09.182842,181,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592c4000800654eac0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y,@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22828, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21738, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473677,182,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a513400080067470c0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tp..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42259, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29808, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473772,183,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028fafa4000800611cdc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64250, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4557, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473793,184,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280157400080062bfac0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.W@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 343, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11258, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.473811,185,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812df400080069f96c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40854, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.583021,186,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1c400080065cfac0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10780, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23802, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:10.583099,187,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592d4000800654e9c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y-@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22829, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.973990,188,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51440008006746fc0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...to..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42260, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29807, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.974096,189,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028fafb4000800611ccc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64251, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4556, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.974116,190,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280158400080062bf9c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.X@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11257, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:12.974133,191,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e0400080069f95c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40853, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:13.083893,192,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1d400080065cf9c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10781, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:13.083985,193,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592e4000800654e8c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y.@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22830, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:14.012671,194,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=2808562734 Ack=0,525400577f945254007bb7920800450000347a4e400080064c5fc0a87aa8a2fb55cac3c9024ba767442e000000008002faf0343d0000020405b40103030801010402,RT.W..RT.{....E..4zN@...L_..z...U....K.gD.........4=..............,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 31310, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19551, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562734, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 13373, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-28 18:23:14.012730,195,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=898325472 Ack=2808562735,5254007bb792525400577f9408004500003400004000400606aea2fb55cac0a87aa8024bc3c9358b5be0a767442f8012a564343d0000020405b40101040201030309,RT.{..RT.W....E..4..@.@.....U...z..K..5.[..gD/...d4=.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1710, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325472, \"\"ack\"\": 2808562735, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 13373, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-28 18:23:14.012854,196,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2808562735 Ack=898325473,525400577f945254007bb7920800450000287a4f400080064c6ac0a87aa8a2fb55cac3c9024ba767442f358b5be15010201434310000,RT.W..RT.{....E..(zO@...Lj..z...U....K.gD/5.[.P. .41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31311, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19562, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562735, \"\"ack\"\": 898325473, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.862912,197,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,FA,,,Ether > IP > TCP,3,TCP FA Seq=1857739733 Ack=4241599660,525400577f945254007bb792080045000028a51540008006746ec0a87aa883fd21fec32401bb6ebadbd5fcd1acac501103fbe1660000,RT.W..RT.{....E..(..@...tn..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42261, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29806, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739733, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.863021,198,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,FA,,,Ether > IP > TCP,3,TCP FA Seq=92098708 Ack=3550148941,525400577f945254007bb792080045000028fafc4000800611cbc0a87aa896ab1c0cc21701bb057d5094d39af94d50110400ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64252, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4555, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098708, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1024, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.863041,199,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=4216733383 Ack=974826609,525400577f945254007bb7920800450000280159400080062bf8c0a87aa8cc4fc5dec32601bbfb563ec73a1aac71501103fdcd990000,RT.W..RT.{....E..(.Y@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11256, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733383, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:17.863058,200,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=226525659 Ack=1444010957,525400577f945254007bb79208004500002812e1400080069f94c0a87aa81730f5d9c32201bb0d8081db5611dbcd501103fd48750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4833, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40852, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525659, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1021, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:18.081676,201,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=4194378438 Ack=1765244119,525400577f945254007bb7920800450000282a1e400080065cf8c0a87aa80d6b2afec32501bbfa0122c669377cd7501103fb73d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10782, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378438, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:18.081815,202,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=654304944 Ack=1203919404,525400577f945254007bb792080045000028592f4000800654e7c0a87aa80d6b03fec32301bb26ffe6b047c25a2c501103fb4cd40000,\"RT.W..RT.{....E..(Y/@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22831, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304944, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1019, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:25.368126,203,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=898325473 Ack=2808562735,5254007bb792525400577f940800450000931ca840004006e9a6a2fb55cac0a87aa8024bc3c9358b5be1a767442f50180053349c00003535302d225b3230332e35352e38312e315d3a333730373220697320696e20616e2052424c206f6e20626c2e70726f312e7765627369746577656c636f6d652e636f6d2c207365650d0a35353020426c6f636b6564202d20426f746e657420446574656e74696f6e220d0a,\"550-\"\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see\n550 Blocked - Botnet Detention\"\"\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 147, \"\"id\"\": 7336, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59814, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325473, \"\"ack\"\": 2808562735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 13468, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"550-\\\"\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see\\r\\n550 Blocked - Botnet Detention\\\"\"\\r\\n\"\"}}]\"\n2026-04-28 18:23:25.368166,204,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=898325580 Ack=2808562735,5254007bb792525400577f940800450000281ca940004006ea10a2fb55cac0a87aa8024bc3c9358b5c4ca767442f5011005334310000,RT.{..RT.W....E..(..@.@.....U...z..K..5.\\L.gD/P..S41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 7337, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59920, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325580, \"\"ack\"\": 2808562735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:25.368539,205,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=2808562735 Ack=898325581,525400577f945254007bb7920800450000287a50400080064c69c0a87aa8a2fb55cac3c9024ba767442f358b5c4d5010201434310000,RT.W..RT.{....E..(zP@...Li..z...U....K.gD/5.\\MP. .41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31312, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19561, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562735, \"\"ack\"\": 898325581, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571525,206,TCP 192.168.122.168:49956 -> 131.253.33.254:443,192.168.122.168,131.253.33.254,49956,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,131.253.33.224/27,RA,,,Ether > IP > TCP,3,TCP RA Seq=1857739734 Ack=4241599660,525400577f945254007bb792080045000028a51640008006746dc0a87aa883fd21fec32401bb6ebadbd6fcd1acac50140000e1660000,RT.W..RT.{....E..(..@...tm..z...!..$..n.......P....f..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 42262, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 29805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"131.253.33.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49956, \"\"dport\"\": 443, \"\"seq\"\": 1857739734, \"\"ack\"\": 4241599660, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 57702, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571638,207,TCP 192.168.122.168:49687 -> 150.171.28.12:443,192.168.122.168,150.171.28.12,49687,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8075,Microsoft Corporation,37.751,-97.822,150.171.0.0/19,RA,,,Ether > IP > TCP,3,TCP RA Seq=92098709 Ack=3550148941,525400577f945254007bb792080045000028fafd4000800611cac0a87aa896ab1c0cc21701bb057d5095d39af94d50140000ee220000,\"RT.W..RT.{....E..(..@.......z..........}P....MP....\"\"..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 64253, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 4554, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"150.171.28.12\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49687, \"\"dport\"\": 443, \"\"seq\"\": 92098709, \"\"ack\"\": 3550148941, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 60962, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571665,208,TCP 192.168.122.168:49958 -> 204.79.197.222:443,192.168.122.168,204.79.197.222,49958,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,204.79.196.0/23,RA,,,Ether > IP > TCP,3,TCP RA Seq=4216733384 Ack=974826609,525400577f945254007bb792080045000028015a400080062bf7c0a87aa8cc4fc5dec32601bbfb563ec83a1aac7150140000cd990000,RT.W..RT.{....E..(.Z@...+...z..O...&...V>.:..qP.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 11255, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"204.79.197.222\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49958, \"\"dport\"\": 443, \"\"seq\"\": 4216733384, \"\"ack\"\": 974826609, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 52633, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.571693,209,TCP 192.168.122.168:49954 -> 23.48.245.217:443,192.168.122.168,23.48.245.217,49954,443,TCP,Internal,Private Network,,,,,,India,New Delhi,9498,BHARTI Airtel Ltd.,28.6327,77.2198,23.48.245.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=226525660 Ack=1444010957,525400577f945254007bb79208004500002812e2400080069f93c0a87aa81730f5d9c32201bb0d8081dc5611dbcd5014000048750000,\"RT.W..RT.{....E..(..@.......z..0...\"\"..\n...V...P...Hu..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 4834, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 40851, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"23.48.245.217\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49954, \"\"dport\"\": 443, \"\"seq\"\": 226525660, \"\"ack\"\": 1444010957, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 18549, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.879449,210,TCP 192.168.122.168:49957 -> 13.107.42.254:443,192.168.122.168,13.107.42.254,49957,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.42.0/24,RA,,,Ether > IP > TCP,3,TCP RA Seq=4194378439 Ack=1765244119,525400577f945254007bb7920800450000282a1f400080065cf7c0a87aa80d6b2afec32501bbfa0122c769377cd75014000073d40000,\"RT.W..RT.{....E..(*.@...\\...z.\nk*..%....\"\".i7|.P...s...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 10783, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 23799, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.42.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49957, \"\"dport\"\": 443, \"\"seq\"\": 4194378439, \"\"ack\"\": 1765244119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 29652, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.879573,211,TCP 192.168.122.168:49955 -> 13.107.3.254:443,192.168.122.168,13.107.3.254,49955,443,TCP,Internal,Private Network,,,,,,United States,Unknown,8068,Microsoft Corporation,37.751,-97.822,13.107.0.0/22,RA,,,Ether > IP > TCP,3,TCP RA Seq=654304945 Ack=1203919404,525400577f945254007bb79208004500002859304000800654e6c0a87aa80d6b03fec32301bb26ffe6b147c25a2c501400004cd40000,\"RT.W..RT.{....E..(Y0@...T...z.\nk...#..&...G.Z,P...L...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22832, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 21734, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"13.107.3.254\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49955, \"\"dport\"\": 443, \"\"seq\"\": 654304945, \"\"ack\"\": 1203919404, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 19668, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.980655,212,TCP 192.168.122.168:50121 -> 162.251.85.202:587,192.168.122.168,162.251.85.202,50121,587,TCP,Internal,Private Network,,,,,,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=2808562735 Ack=898325581,525400577f945254007bb7920800450000287a51400080064c68c0a87aa8a2fb55cac3c9024ba767442f358b5c4d5011201434310000,RT.W..RT.{....E..(zQ@...Lh..z...U....K.gD/5.\\MP. .41..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 31313, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 19560, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"162.251.85.202\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50121, \"\"dport\"\": 587, \"\"seq\"\": 2808562735, \"\"ack\"\": 898325581, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 13361, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:23:27.980698,213,TCP 162.251.85.202:587 -> 192.168.122.168:50121,162.251.85.202,192.168.122.168,587,50121,TCP,United States,Unknown,46606,Unified Layer,37.751,-97.822,162.251.84.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=898325581 Ack=2808562736,5254007bb792525400577f9408004500002800004000400606baa2fb55cac0a87aa8024bc3c9358b5c4da76744305010005337e60000,RT.{..RT.W....E..(..@.@.....U...z..K..5.\\M.gD0P..S7...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 1722, \"\"src\"\": \"\"162.251.85.202\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 587, \"\"dport\"\": 50121, \"\"seq\"\": 898325581, \"\"ack\"\": 2808562736, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 14310, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:06.999466,214,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3385611947 Ack=3782497524,5254007bb792525400577f9408004500002838e2400040064a7184e2f749c0a87aa80050c3b4c9cc56abe17454f450110053b7970000,RT.{..RT.W....E..(8.@.@.Jq...I..z..P....V..tT.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 14562, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 19057, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611947, \"\"ack\"\": 3782497524, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:06.999648,215,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,A,,,Ether > IP > TCP,3,TCP A Seq=3782497524 Ack=3385611948,525400577f945254007bb792080045000028d2a44000800670aec0a87aa884e2f749c3b40050e17454f4c9cc56ac50100402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tT...V.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53924, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28846, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497524, \"\"ack\"\": 3385611948, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:41.882982,216,TCP 192.168.122.168:50100 -> 132.226.247.73:80,192.168.122.168,132.226.247.73,50100,80,TCP,Internal,Private Network,,,,,,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,FA,,,Ether > IP > TCP,3,TCP FA Seq=3782497524 Ack=3385611948,525400577f945254007bb792080045000028d2a54000800670adc0a87aa884e2f749c3b40050e17454f4c9cc56ac50110402b7970000,RT.W..RT.{....E..(..@...p...z....I...P.tT...V.P.......,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 53925, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 28845, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"132.226.247.73\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50100, \"\"dport\"\": 80, \"\"seq\"\": 3782497524, \"\"ack\"\": 3385611948, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 46999, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:41.883054,217,TCP 132.226.247.73:80 -> 192.168.122.168:50100,132.226.247.73,192.168.122.168,80,50100,TCP,Brazil,São Paulo,31898,Oracle Corporation,-23.5475,-46.6361,132.226.240.0/20,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3385611948 Ack=3782497525,5254007bb792525400577f94080045000028000040004006835384e2f749c0a87aa80050c3b4c9cc56ace17454f550100053dd1c0000,RT.{..RT.W....E..(..@.@..S...I..z..P....V..tT.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 33619, \"\"src\"\": \"\"132.226.247.73\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50100, \"\"seq\"\": 3385611948, \"\"ack\"\": 3782497525, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 56604, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:45.901105,218,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=902239039 Ack=4075045341,525400577f945254007bb79208004500002806e4400080067c92c0a87aa8959aa66ec3c801bb35c7133ff2e441dd5011201477740000,RT.W..RT.{....E..(..@...|...z....n....5..?..A.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1764, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31890, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902239039, \"\"ack\"\": 4075045341, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:45.901261,219,TCP 149.154.166.110:443 -> 192.168.122.168:50120,149.154.166.110,192.168.122.168,443,50120,TCP,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=4075045341 Ack=902239040,5254007bb792525400577f94080045000028ba2e400040060948959aa66ec0a87aa801bbc3c8f2e441dd35c713405011005377740000,RT.{..RT.W....E..(..@.@.\tH...n..z.......A.5..@P..Swt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 47662, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 2376, \"\"src\"\": \"\"149.154.166.110\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 50120, \"\"seq\"\": 4075045341, \"\"ack\"\": 902239040, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-28 18:24:45.901380,220,TCP 192.168.122.168:50120 -> 149.154.166.110:443,192.168.122.168,149.154.166.110,50120,443,TCP,Internal,Private Network,,,,,,United Kingdom,London,62041,Telegram Messenger Inc,51.5081,-0.1278,149.154.166.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=902239040 Ack=4075045342,525400577f945254007bb79208004500002806e5400080067c91c0a87aa8959aa66ec3c801bb35c71340f2e441de5010201477740000,RT.W..RT.{....E..(..@...|...z....n....5..@..A.P. .wt..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1765, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 31889, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"149.154.166.110\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50120, \"\"dport\"\": 443, \"\"seq\"\": 902239040, \"\"ack\"\": 4075045342, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 30580, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 212, \"total_bytes_sent\": 15494, \"total_bytes_received\": 14898, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [49899, 49892, 50100, 50104, 50107, 50111, 50112, 50113, 50115, 50117, 50118, 50119, 50120, 49957, 49956, 49955, 49687, 49958, 49954, 50121], \"first_seen\": 1777400503.554304, \"last_seen\": 1777400685.90138, \"packets\": [{\"num\": 170, \"time\": 1777400588.372445, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 171, \"time\": 1777400588.372465, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 172, \"time\": 1777400588.372483, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 173, \"time\": 1777400588.481693, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 174, \"time\": 1777400588.481859, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 175, \"time\": 1777400589.075432, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 176, \"time\": 1777400589.075568, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 177, \"time\": 1777400589.075588, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 178, \"time\": 1777400589.075606, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 179, \"time\": 1777400589.182699, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 180, \"time\": 1777400589.182842, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 181, \"time\": 1777400590.473677, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 182, \"time\": 1777400590.473772, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 183, \"time\": 1777400590.473793, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 184, \"time\": 1777400590.473811, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 185, \"time\": 1777400590.583021, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 186, \"time\": 1777400590.583099, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 187, \"time\": 1777400592.97399, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 188, \"time\": 1777400592.974096, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 189, \"time\": 1777400592.974116, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 190, \"time\": 1777400592.974133, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 191, \"time\": 1777400593.083893, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 192, \"time\": 1777400593.083985, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 193, \"time\": 1777400594.012671, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 194, \"time\": 1777400594.01273, \"size\": 66, \"direction\": \"received\"}, {\"num\": 195, \"time\": 1777400594.012854, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 196, \"time\": 1777400597.862912, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 197, \"time\": 1777400597.863021, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 198, \"time\": 1777400597.863041, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 199, \"time\": 1777400597.863058, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 200, \"time\": 1777400598.081676, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 201, \"time\": 1777400598.081815, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 202, \"time\": 1777400605.368126, \"size\": 161, \"direction\": \"received\"}, {\"num\": 203, \"time\": 1777400605.368166, \"size\": 54, \"direction\": \"received\"}, {\"num\": 204, \"time\": 1777400605.368539, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 205, \"time\": 1777400607.571525, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 206, \"time\": 1777400607.571638, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 207, \"time\": 1777400607.571665, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 208, \"time\": 1777400607.571693, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 209, \"time\": 1777400607.879449, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 210, \"time\": 1777400607.879573, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 211, \"time\": 1777400607.980655, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 212, \"time\": 1777400607.980698, \"size\": 54, \"direction\": \"received\"}, {\"num\": 213, \"time\": 1777400646.999466, \"size\": 54, \"direction\": \"received\"}, {\"num\": 214, \"time\": 1777400646.999648, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 215, \"time\": 1777400681.882982, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 216, \"time\": 1777400681.883054, \"size\": 54, \"direction\": \"received\"}, {\"num\": 217, \"time\": 1777400685.901105, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 218, \"time\": 1777400685.901261, \"size\": 54, \"direction\": \"received\"}, {\"num\": 219, \"time\": 1777400685.90138, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 182.34707617759705, \"avg_packet_size\": 143.35849056603774, \"packets_per_second\": 1.1626180383255638}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777400503.554304, \"last_seen\": 1777400527.281885, \"packets\": [{\"num\": 0, \"time\": 1777400503.554304, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777400503.855678, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777400504.465033, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777400505.66826, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777400505.895441, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777400506.199361, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777400506.80872, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777400506.871203, \"size\": 153, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777400508.018008, \"size\": 302, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777400508.081837, \"size\": 153, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777400509.230467, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777400510.433575, \"size\": 302, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777400510.496041, \"size\": 153, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777400512.840695, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777400515.401634, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777400517.64396, \"size\": 302, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1777400525.073843, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777400527.281885, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 23.727581024169922, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7586108327546932}, {\"id\": \"132.226.247.73\", \"ip\": \"132.226.247.73\", \"packet_count\": 47, \"total_bytes_sent\": 4304, \"total_bytes_received\": 2602, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1777400567.390152, \"last_seen\": 1777400681.883054, \"packets\": [{\"num\": 18, \"time\": 1777400567.390152, \"size\": 66, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777400567.390207, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777400567.3903, \"size\": 54, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777400567.390637, \"size\": 205, \"direction\": \"received\"}, {\"num\": 22, \"time\": 1777400567.39065, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777400569.043465, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 24, \"time\": 1777400569.160366, \"size\": 54, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777400569.187929, \"size\": 181, \"direction\": \"received\"}, {\"num\": 26, \"time\": 1777400569.187956, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777400569.690256, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 28, \"time\": 1777400569.874046, \"size\": 54, \"direction\": \"received\"}, {\"num\": 43, \"time\": 1777400572.897042, \"size\": 181, \"direction\": \"received\"}, {\"num\": 44, \"time\": 1777400572.897073, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 45, \"time\": 1777400573.473733, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 51, \"time\": 1777400573.674969, \"size\": 54, \"direction\": \"received\"}, {\"num\": 56, \"time\": 1777400574.110449, \"size\": 181, \"direction\": \"received\"}, {\"num\": 57, \"time\": 1777400574.110467, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 58, \"time\": 1777400574.576307, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 64, \"time\": 1777400574.674912, \"size\": 54, \"direction\": \"received\"}, {\"num\": 69, \"time\": 1777400574.993879, \"size\": 181, \"direction\": \"received\"}, {\"num\": 70, \"time\": 1777400574.993925, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 71, \"time\": 1777400575.507824, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 77, \"time\": 1777400575.573041, \"size\": 54, \"direction\": \"received\"}, {\"num\": 82, \"time\": 1777400576.016912, \"size\": 181, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1777400576.016972, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 84, \"time\": 1777400576.448636, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1777400576.661194, \"size\": 54, \"direction\": \"received\"}, {\"num\": 96, \"time\": 1777400577.806554, \"size\": 181, \"direction\": \"received\"}, {\"num\": 97, \"time\": 1777400577.806588, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 98, \"time\": 1777400578.361252, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 104, \"time\": 1777400578.475155, \"size\": 54, \"direction\": \"received\"}, {\"num\": 109, \"time\": 1777400578.837553, \"size\": 181, \"direction\": \"received\"}, {\"num\": 110, \"time\": 1777400578.837584, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 111, \"time\": 1777400579.5005, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 117, \"time\": 1777400579.569445, \"size\": 54, \"direction\": \"received\"}, {\"num\": 122, \"time\": 1777400580.317254, \"size\": 181, \"direction\": \"received\"}, {\"num\": 123, \"time\": 1777400580.317319, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 124, \"time\": 1777400580.734961, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 130, \"time\": 1777400580.774523, \"size\": 54, \"direction\": \"received\"}, {\"num\": 135, \"time\": 1777400581.149003, \"size\": 181, \"direction\": \"received\"}, {\"num\": 136, \"time\": 1777400581.149039, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 137, \"time\": 1777400581.851787, \"size\": 359, \"direction\": \"sent\"}, {\"num\": 143, \"time\": 1777400581.973483, \"size\": 54, \"direction\": \"received\"}, {\"num\": 213, \"time\": 1777400646.999466, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 214, \"time\": 1777400646.999648, \"size\": 54, \"direction\": \"received\"}, {\"num\": 215, \"time\": 1777400681.882982, \"size\": 54, \"direction\": \"received\"}, {\"num\": 216, \"time\": 1777400681.883054, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Brazil\", \"city\": \"S\\u00e3o Paulo\", \"lat\": -23.5475, \"lon\": -46.6361, \"asn\": 31898, \"isp\": \"Oracle Corporation\", \"network\": \"132.226.240.0/20\"}, \"duration\": 114.49290204048157, \"avg_packet_size\": 146.93617021276594, \"packets_per_second\": 0.41050579697405243}, {\"id\": \"188.114.96.0\", \"ip\": \"188.114.96.0\", \"packet_count\": 79, \"total_bytes_sent\": 4742, \"total_bytes_received\": 5498, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777400570.549657, \"last_seen\": 1777400582.263481, \"packets\": [{\"num\": 68, \"time\": 1777400574.963386, \"size\": 54, \"direction\": \"received\"}, {\"num\": 72, \"time\": 1777400575.509256, \"size\": 66, \"direction\": \"received\"}, {\"num\": 73, \"time\": 1777400575.509313, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 74, \"time\": 1777400575.50945, \"size\": 54, \"direction\": \"received\"}, {\"num\": 75, \"time\": 1777400575.509826, \"size\": 369, \"direction\": \"received\"}, {\"num\": 76, \"time\": 1777400575.509846, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 79, \"time\": 1777400575.91047, \"size\": 54, \"direction\": \"received\"}, {\"num\": 80, \"time\": 1777400575.910597, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 81, \"time\": 1777400575.910667, \"size\": 54, \"direction\": \"received\"}, {\"num\": 85, \"time\": 1777400576.449893, \"size\": 66, \"direction\": \"received\"}, {\"num\": 86, \"time\": 1777400576.449951, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1777400576.450162, \"size\": 54, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1777400576.450548, \"size\": 369, \"direction\": \"received\"}, {\"num\": 89, \"time\": 1777400576.450575, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 92, \"time\": 1777400577.679861, \"size\": 54, \"direction\": \"received\"}, {\"num\": 93, \"time\": 1777400577.755073, \"size\": 54, \"direction\": \"received\"}, {\"num\": 94, \"time\": 1777400577.755152, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1777400577.755274, \"size\": 54, \"direction\": \"received\"}, {\"num\": 99, \"time\": 1777400578.362289, \"size\": 66, \"direction\": \"received\"}, {\"num\": 100, \"time\": 1777400578.362333, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 101, \"time\": 1777400578.362408, \"size\": 54, \"direction\": \"received\"}, {\"num\": 102, \"time\": 1777400578.362806, \"size\": 369, \"direction\": \"received\"}, {\"num\": 103, \"time\": 1777400578.362821, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 106, \"time\": 1777400578.830605, \"size\": 54, \"direction\": \"received\"}, {\"num\": 107, \"time\": 1777400578.830692, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 108, \"time\": 1777400578.830814, \"size\": 54, \"direction\": \"received\"}, {\"num\": 112, \"time\": 1777400579.502199, \"size\": 66, \"direction\": \"received\"}, {\"num\": 113, \"time\": 1777400579.502254, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 114, \"time\": 1777400579.502339, \"size\": 54, \"direction\": \"received\"}, {\"num\": 115, \"time\": 1777400579.502822, \"size\": 369, \"direction\": \"received\"}, {\"num\": 116, \"time\": 1777400579.502841, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 119, \"time\": 1777400580.152957, \"size\": 54, \"direction\": \"received\"}, {\"num\": 120, \"time\": 1777400580.153054, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 121, \"time\": 1777400580.153205, \"size\": 54, \"direction\": \"received\"}, {\"num\": 125, \"time\": 1777400580.736982, \"size\": 66, \"direction\": \"received\"}, {\"num\": 126, \"time\": 1777400580.737054, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 127, \"time\": 1777400580.737157, \"size\": 54, \"direction\": \"received\"}, {\"num\": 128, \"time\": 1777400580.737805, \"size\": 369, \"direction\": \"received\"}, {\"num\": 129, \"time\": 1777400580.73783, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 132, \"time\": 1777400581.131759, \"size\": 54, \"direction\": \"received\"}, {\"num\": 133, \"time\": 1777400581.131848, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 134, \"time\": 1777400581.131973, \"size\": 54, \"direction\": \"received\"}, {\"num\": 138, \"time\": 1777400581.853166, \"size\": 66, \"direction\": \"received\"}, {\"num\": 139, \"time\": 1777400581.853245, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 140, \"time\": 1777400581.853402, \"size\": 54, \"direction\": \"received\"}, {\"num\": 141, \"time\": 1777400581.854101, \"size\": 369, \"direction\": \"received\"}, {\"num\": 142, \"time\": 1777400581.854123, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 145, \"time\": 1777400582.263233, \"size\": 54, \"direction\": \"received\"}, {\"num\": 146, \"time\": 1777400582.263412, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 147, \"time\": 1777400582.263481, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Unknown\", \"city\": \"Unknown\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": 13335, \"isp\": \"Cloudflare, Inc.\", \"network\": \"188.114.96.0/22\"}, \"duration\": 11.713823795318604, \"avg_packet_size\": 129.62025316455697, \"packets_per_second\": 6.7441683757930635}, {\"id\": \"149.154.166.110\", \"ip\": \"149.154.166.110\", \"packet_count\": 18, \"total_bytes_sent\": 5517, \"total_bytes_received\": 1150, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1777400584.708655, \"last_seen\": 1777400685.90138, \"packets\": [{\"num\": 148, \"time\": 1777400584.708655, \"size\": 66, \"direction\": \"received\"}, {\"num\": 149, \"time\": 1777400584.708715, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 150, \"time\": 1777400584.708829, \"size\": 54, \"direction\": \"received\"}, {\"num\": 151, \"time\": 1777400584.709588, \"size\": 232, \"direction\": \"received\"}, {\"num\": 152, \"time\": 1777400584.709613, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 153, \"time\": 1777400585.124668, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 154, \"time\": 1777400585.124903, \"size\": 54, \"direction\": \"received\"}, {\"num\": 155, \"time\": 1777400585.30433, \"size\": 950, \"direction\": \"sent\"}, {\"num\": 156, \"time\": 1777400585.324448, \"size\": 147, \"direction\": \"received\"}, {\"num\": 157, \"time\": 1777400585.32451, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 158, \"time\": 1777400585.685178, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 159, \"time\": 1777400585.694893, \"size\": 435, \"direction\": \"received\"}, {\"num\": 160, \"time\": 1777400585.69494, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 161, \"time\": 1777400585.888191, \"size\": 487, \"direction\": \"sent\"}, {\"num\": 162, \"time\": 1777400585.978378, \"size\": 54, \"direction\": \"received\"}, {\"num\": 217, \"time\": 1777400685.901105, \"size\": 54, \"direction\": \"received\"}, {\"num\": 218, \"time\": 1777400685.901261, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 219, \"time\": 1777400685.90138, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United Kingdom\", \"city\": \"London\", \"lat\": 51.5081, \"lon\": -0.1278, \"asn\": 62041, \"isp\": \"Telegram Messenger Inc\", \"network\": \"149.154.166.0/24\"}, \"duration\": 101.19272494316101, \"avg_packet_size\": 370.3888888888889, \"packets_per_second\": 0.17787839995523816}, {\"id\": \"13.107.42.254\", \"ip\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.044914, \"last_seen\": 1777400607.879449, \"packets\": [{\"num\": 163, \"time\": 1777400588.044914, \"size\": 54, \"direction\": \"received\"}, {\"num\": 173, \"time\": 1777400588.481693, \"size\": 54, \"direction\": \"received\"}, {\"num\": 179, \"time\": 1777400589.182699, \"size\": 54, \"direction\": \"received\"}, {\"num\": 185, \"time\": 1777400590.583021, \"size\": 54, \"direction\": \"received\"}, {\"num\": 191, \"time\": 1777400593.083893, \"size\": 54, \"direction\": \"received\"}, {\"num\": 200, \"time\": 1777400598.081676, \"size\": 54, \"direction\": \"received\"}, {\"num\": 209, \"time\": 1777400607.879449, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.42.0/24\"}, \"duration\": 19.834534883499146, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3529197957560113}, {\"id\": \"131.253.33.254\", \"ip\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.045094, \"last_seen\": 1777400607.571525, \"packets\": [{\"num\": 164, \"time\": 1777400588.045094, \"size\": 54, \"direction\": \"received\"}, {\"num\": 169, \"time\": 1777400588.372311, \"size\": 54, \"direction\": \"received\"}, {\"num\": 175, \"time\": 1777400589.075432, \"size\": 54, \"direction\": \"received\"}, {\"num\": 181, \"time\": 1777400590.473677, \"size\": 54, \"direction\": \"received\"}, {\"num\": 187, \"time\": 1777400592.97399, \"size\": 54, \"direction\": \"received\"}, {\"num\": 196, \"time\": 1777400597.862912, \"size\": 54, \"direction\": \"received\"}, {\"num\": 205, \"time\": 1777400607.571525, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"131.253.33.224/27\"}, \"duration\": 19.5264310836792, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35848844932297014}, {\"id\": \"13.107.3.254\", \"ip\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.050531, \"last_seen\": 1777400607.879573, \"packets\": [{\"num\": 165, \"time\": 1777400588.050531, \"size\": 54, \"direction\": \"received\"}, {\"num\": 174, \"time\": 1777400588.481859, \"size\": 54, \"direction\": \"received\"}, {\"num\": 180, \"time\": 1777400589.182842, \"size\": 54, \"direction\": \"received\"}, {\"num\": 186, \"time\": 1777400590.583099, \"size\": 54, \"direction\": \"received\"}, {\"num\": 192, \"time\": 1777400593.083985, \"size\": 54, \"direction\": \"received\"}, {\"num\": 201, \"time\": 1777400598.081815, \"size\": 54, \"direction\": \"received\"}, {\"num\": 210, \"time\": 1777400607.879573, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"13.107.0.0/22\"}, \"duration\": 19.829042196273804, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35301755529651413}, {\"id\": \"150.171.28.12\", \"ip\": \"150.171.28.12\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.052597, \"last_seen\": 1777400607.571638, \"packets\": [{\"num\": 166, \"time\": 1777400588.052597, \"size\": 54, \"direction\": \"received\"}, {\"num\": 170, \"time\": 1777400588.372445, \"size\": 54, \"direction\": \"received\"}, {\"num\": 176, \"time\": 1777400589.075568, \"size\": 54, \"direction\": \"received\"}, {\"num\": 182, \"time\": 1777400590.473772, \"size\": 54, \"direction\": \"received\"}, {\"num\": 188, \"time\": 1777400592.974096, \"size\": 54, \"direction\": \"received\"}, {\"num\": 197, \"time\": 1777400597.863021, \"size\": 54, \"direction\": \"received\"}, {\"num\": 206, \"time\": 1777400607.571638, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"150.171.0.0/19\"}, \"duration\": 19.519041061401367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586241751313492}, {\"id\": \"204.79.197.222\", \"ip\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.052694, \"last_seen\": 1777400607.571665, \"packets\": [{\"num\": 167, \"time\": 1777400588.052694, \"size\": 54, \"direction\": \"received\"}, {\"num\": 171, \"time\": 1777400588.372465, \"size\": 54, \"direction\": \"received\"}, {\"num\": 177, \"time\": 1777400589.075588, \"size\": 54, \"direction\": \"received\"}, {\"num\": 183, \"time\": 1777400590.473793, \"size\": 54, \"direction\": \"received\"}, {\"num\": 189, \"time\": 1777400592.974116, \"size\": 54, \"direction\": \"received\"}, {\"num\": 198, \"time\": 1777400597.863041, \"size\": 54, \"direction\": \"received\"}, {\"num\": 207, \"time\": 1777400607.571665, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 8068, \"isp\": \"Microsoft Corporation\", \"network\": \"204.79.196.0/23\"}, \"duration\": 19.51897096633911, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586254629955468}, {\"id\": \"23.48.245.217\", \"ip\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes_sent\": 0, \"total_bytes_received\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"ports_used\": [443], \"first_seen\": 1777400588.061058, \"last_seen\": 1777400607.571693, \"packets\": [{\"num\": 168, \"time\": 1777400588.061058, \"size\": 54, \"direction\": \"received\"}, {\"num\": 172, \"time\": 1777400588.372483, \"size\": 54, \"direction\": \"received\"}, {\"num\": 178, \"time\": 1777400589.075606, \"size\": 54, \"direction\": \"received\"}, {\"num\": 184, \"time\": 1777400590.473811, \"size\": 54, \"direction\": \"received\"}, {\"num\": 190, \"time\": 1777400592.974133, \"size\": 54, \"direction\": \"received\"}, {\"num\": 199, \"time\": 1777400597.863058, \"size\": 54, \"direction\": \"received\"}, {\"num\": 208, \"time\": 1777400607.571693, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"New Delhi\", \"lat\": 28.6327, \"lon\": 77.2198, \"asn\": 9498, \"isp\": \"BHARTI Airtel Ltd.\", \"network\": \"23.48.245.0/24\"}, \"duration\": 19.510634899139404, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35877868845307354}, {\"id\": \"162.251.85.202\", \"ip\": \"162.251.85.202\", \"packet_count\": 8, \"total_bytes_sent\": 335, \"total_bytes_received\": 228, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [587], \"first_seen\": 1777400594.012671, \"last_seen\": 1777400607.980698, \"packets\": [{\"num\": 193, \"time\": 1777400594.012671, \"size\": 66, \"direction\": \"received\"}, {\"num\": 194, \"time\": 1777400594.01273, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 195, \"time\": 1777400594.012854, \"size\": 54, \"direction\": \"received\"}, {\"num\": 202, \"time\": 1777400605.368126, \"size\": 161, \"direction\": \"sent\"}, {\"num\": 203, \"time\": 1777400605.368166, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 204, \"time\": 1777400605.368539, \"size\": 54, \"direction\": \"received\"}, {\"num\": 211, \"time\": 1777400607.980655, \"size\": 54, \"direction\": \"received\"}, {\"num\": 212, \"time\": 1777400607.980698, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 46606, \"isp\": \"Unified Layer\", \"network\": \"162.251.84.0/23\"}, \"duration\": 13.968027114868164, \"avg_packet_size\": 70.375, \"packets_per_second\": 0.5727365743358601}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777400503.554304, \"last_packet\": 1777400527.281885, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777400503.554304, \"timestamp_iso\": \"2026-04-28T23:51:43.554304\", \"timestamp_human\": \"2026-04-28 23:51:43.554\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777400503.855678, \"timestamp_iso\": \"2026-04-28T23:51:43.855678\", \"timestamp_human\": \"2026-04-28 23:51:43.855\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777400504.465033, \"timestamp_iso\": \"2026-04-28T23:51:44.465033\", \"timestamp_human\": \"2026-04-28 23:51:44.465\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777400505.66826, \"timestamp_iso\": \"2026-04-28T23:51:45.668260\", \"timestamp_human\": \"2026-04-28 23:51:45.668\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777400505.895441, \"timestamp_iso\": \"2026-04-28T23:51:45.895441\", \"timestamp_human\": \"2026-04-28 23:51:45.895\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777400506.199361, \"timestamp_iso\": \"2026-04-28T23:51:46.199361\", \"timestamp_human\": \"2026-04-28 23:51:46.199\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777400506.80872, \"timestamp_iso\": \"2026-04-28T23:51:46.808720\", \"timestamp_human\": \"2026-04-28 23:51:46.808\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777400506.871203, \"timestamp_iso\": \"2026-04-28T23:51:46.871203\", \"timestamp_human\": \"2026-04-28 23:51:46.871\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777400508.018008, \"timestamp_iso\": \"2026-04-28T23:51:48.018008\", \"timestamp_human\": \"2026-04-28 23:51:48.018\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777400508.081837, \"timestamp_iso\": \"2026-04-28T23:51:48.081837\", \"timestamp_human\": \"2026-04-28 23:51:48.081\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777400509.230467, \"timestamp_iso\": \"2026-04-28T23:51:49.230467\", \"timestamp_human\": \"2026-04-28 23:51:49.230\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777400510.433575, \"timestamp_iso\": \"2026-04-28T23:51:50.433575\", \"timestamp_human\": \"2026-04-28 23:51:50.433\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777400510.496041, \"timestamp_iso\": \"2026-04-28T23:51:50.496041\", \"timestamp_human\": \"2026-04-28 23:51:50.496\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777400512.840695, \"timestamp_iso\": \"2026-04-28T23:51:52.840695\", \"timestamp_human\": \"2026-04-28 23:51:52.840\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777400515.401634, \"timestamp_iso\": \"2026-04-28T23:51:55.401634\", \"timestamp_human\": \"2026-04-28 23:51:55.401\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777400517.64396, \"timestamp_iso\": \"2026-04-28T23:51:57.643960\", \"timestamp_human\": \"2026-04-28 23:51:57.643\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 16, \"timestamp\": 1777400525.073843, \"timestamp_iso\": \"2026-04-28T23:52:05.073843\", \"timestamp_human\": \"2026-04-28 23:52:05.073\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1777400527.281885, \"timestamp_iso\": \"2026-04-28T23:52:07.281885\", \"timestamp_human\": \"2026-04-28 23:52:07.281\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 302, 302, 153, 302, 153, 302, 302, 153, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.3013741970062256, 0.6093549728393555, 1.2032270431518555, 0.22718095779418945, 0.30392003059387207, 0.6093590259552002, 0.06248283386230469, 1.1468050479888916, 0.06382894515991211, 1.148630142211914, 1.2031078338623047, 0.06246614456176758, 2.344653844833374, 2.560939073562622, 2.242326021194458, 7.429883003234863, 2.2080419063568115], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 23.727581024169922, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7586108327546932, \"bytes_per_second\": 157.9596333980328, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.3957400602452896, \"min_interval\": 0.06246614456176758, \"max_interval\": 7.429883003234863}, {\"source\": \"192.168.122.168\", \"target\": \"132.226.247.73\", \"packet_count\": 24, \"total_bytes\": 2602, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [50100], \"dst_ports\": [80], \"first_packet\": 1777400567.390152, \"last_packet\": 1777400681.882982, \"packets\": [{\"packet_number\": 18, \"timestamp\": 1777400567.390152, \"timestamp_iso\": \"2026-04-28T23:52:47.390152\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53902, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496229, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 20, \"timestamp\": 1777400567.3903, \"timestamp_iso\": \"2026-04-28T23:52:47.390300\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53903, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496230, \"tcp_ack\": 3385608897, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 21, \"timestamp\": 1777400567.390637, \"timestamp_iso\": \"2026-04-28T23:52:47.390637\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 205, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53904, \"ip_len\": 191, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496230, \"tcp_ack\": 3385608897, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 24, \"timestamp\": 1777400569.160366, \"timestamp_iso\": \"2026-04-28T23:52:49.160366\", \"timestamp_human\": \"2026-04-28 23:52:49.160\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53905, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496381, \"tcp_ack\": 3385609202, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777400569.187929, \"timestamp_iso\": \"2026-04-28T23:52:49.187929\", \"timestamp_human\": \"2026-04-28 23:52:49.187\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53906, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496381, \"tcp_ack\": 3385609202, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777400569.874046, \"timestamp_iso\": \"2026-04-28T23:52:49.874046\", \"timestamp_human\": \"2026-04-28 23:52:49.874\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53907, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496508, \"tcp_ack\": 3385609507, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 43, \"timestamp\": 1777400572.897042, \"timestamp_iso\": \"2026-04-28T23:52:52.897042\", \"timestamp_human\": \"2026-04-28 23:52:52.897\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53908, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496508, \"tcp_ack\": 3385609507, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 51, \"timestamp\": 1777400573.674969, \"timestamp_iso\": \"2026-04-28T23:52:53.674969\", \"timestamp_human\": \"2026-04-28 23:52:53.674\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53909, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496635, \"tcp_ack\": 3385609812, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 56, \"timestamp\": 1777400574.110449, \"timestamp_iso\": \"2026-04-28T23:52:54.110449\", \"timestamp_human\": \"2026-04-28 23:52:54.110\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53910, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496635, \"tcp_ack\": 3385609812, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 64, \"timestamp\": 1777400574.674912, \"timestamp_iso\": \"2026-04-28T23:52:54.674912\", \"timestamp_human\": \"2026-04-28 23:52:54.674\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53911, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496762, \"tcp_ack\": 3385610117, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 69, \"timestamp\": 1777400574.993879, \"timestamp_iso\": \"2026-04-28T23:52:54.993879\", \"timestamp_human\": \"2026-04-28 23:52:54.993\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53912, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496762, \"tcp_ack\": 3385610117, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 77, \"timestamp\": 1777400575.573041, \"timestamp_iso\": \"2026-04-28T23:52:55.573041\", \"timestamp_human\": \"2026-04-28 23:52:55.573\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53913, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496889, \"tcp_ack\": 3385610422, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 82, \"timestamp\": 1777400576.016912, \"timestamp_iso\": \"2026-04-28T23:52:56.016912\", \"timestamp_human\": \"2026-04-28 23:52:56.016\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53914, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782496889, \"tcp_ack\": 3385610422, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 90, \"timestamp\": 1777400576.661194, \"timestamp_iso\": \"2026-04-28T23:52:56.661194\", \"timestamp_human\": \"2026-04-28 23:52:56.661\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53915, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497016, \"tcp_ack\": 3385610727, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 96, \"timestamp\": 1777400577.806554, \"timestamp_iso\": \"2026-04-28T23:52:57.806554\", \"timestamp_human\": \"2026-04-28 23:52:57.806\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53916, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497016, \"tcp_ack\": 3385610727, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 104, \"timestamp\": 1777400578.475155, \"timestamp_iso\": \"2026-04-28T23:52:58.475155\", \"timestamp_human\": \"2026-04-28 23:52:58.475\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53917, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497143, \"tcp_ack\": 3385611032, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 109, \"timestamp\": 1777400578.837553, \"timestamp_iso\": \"2026-04-28T23:52:58.837553\", \"timestamp_human\": \"2026-04-28 23:52:58.837\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53918, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497143, \"tcp_ack\": 3385611032, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 117, \"timestamp\": 1777400579.569445, \"timestamp_iso\": \"2026-04-28T23:52:59.569445\", \"timestamp_human\": \"2026-04-28 23:52:59.569\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53919, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497270, \"tcp_ack\": 3385611337, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 122, \"timestamp\": 1777400580.317254, \"timestamp_iso\": \"2026-04-28T23:53:00.317254\", \"timestamp_human\": \"2026-04-28 23:53:00.317\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53920, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497270, \"tcp_ack\": 3385611337, \"tcp_window\": 1022, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 130, \"timestamp\": 1777400580.774523, \"timestamp_iso\": \"2026-04-28T23:53:00.774523\", \"timestamp_human\": \"2026-04-28 23:53:00.774\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53921, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497397, \"tcp_ack\": 3385611642, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 135, \"timestamp\": 1777400581.149003, \"timestamp_iso\": \"2026-04-28T23:53:01.149003\", \"timestamp_human\": \"2026-04-28 23:53:01.149\", \"size\": 181, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53922, \"ip_len\": 167, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497397, \"tcp_ack\": 3385611642, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 143, \"timestamp\": 1777400581.973483, \"timestamp_iso\": \"2026-04-28T23:53:01.973483\", \"timestamp_human\": \"2026-04-28 23:53:01.973\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53923, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497524, \"tcp_ack\": 3385611947, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 214, \"timestamp\": 1777400646.999648, \"timestamp_iso\": \"2026-04-28T23:54:06.999648\", \"timestamp_human\": \"2026-04-28 23:54:06.999\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53924, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497524, \"tcp_ack\": 3385611948, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 215, \"timestamp\": 1777400681.882982, \"timestamp_iso\": \"2026-04-28T23:54:41.882982\", \"timestamp_human\": \"2026-04-28 23:54:41.882\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"132.226.247.73\", \"ttl\": 128, \"ip_id\": 53925, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50100, \"dst_port\": 80, \"tcp_seq\": 3782497524, \"tcp_ack\": 3385611948, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 23, \"PSH\": 10, \"FIN\": 1}, \"packet_sizes\": [66, 54, 205, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 181, 54, 54, 54], \"inter_packet_intervals\": [0.0001480579376220703, 0.0003368854522705078, 1.7697291374206543, 0.027562856674194336, 0.6861171722412109, 3.022995948791504, 0.7779269218444824, 0.43548011779785156, 0.5644629001617432, 0.3189671039581299, 0.5791618824005127, 0.44387102127075195, 0.6442821025848389, 1.145359992980957, 0.6686010360717773, 0.3623979091644287, 0.7318918704986572, 0.7478091716766357, 0.45726895332336426, 0.3744800090789795, 0.8244800567626953, 65.02616500854492, 34.883333921432495], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 114.49283003807068, \"avg_packet_size\": 108.41666666666667, \"packets_per_second\": 0.20962011325966542, \"bytes_per_second\": 22.72631394590206, \"min_packet_size\": 54, \"max_packet_size\": 205, \"median_packet_size\": 54, \"avg_interval\": 4.977949132090029, \"min_interval\": 0.0001480579376220703, \"max_interval\": 65.02616500854492}, {\"source\": \"132.226.247.73\", \"target\": \"192.168.122.168\", \"packet_count\": 23, \"total_bytes\": 4304, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [50100], \"first_packet\": 1777400567.390207, \"last_packet\": 1777400681.883054, \"packets\": [{\"packet_number\": 19, \"timestamp\": 1777400567.390207, \"timestamp_iso\": \"2026-04-28T23:52:47.390207\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385608896, \"tcp_ack\": 3782496230, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777400567.39065, \"timestamp_iso\": \"2026-04-28T23:52:47.390650\", \"timestamp_human\": \"2026-04-28 23:52:47.390\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14542, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385608897, \"tcp_ack\": 3782496381, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 23, \"timestamp\": 1777400569.043465, \"timestamp_iso\": \"2026-04-28T23:52:49.043465\", \"timestamp_human\": \"2026-04-28 23:52:49.043\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14543, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385608897, \"tcp_ack\": 3782496381, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 26, \"timestamp\": 1777400569.187956, \"timestamp_iso\": \"2026-04-28T23:52:49.187956\", \"timestamp_human\": \"2026-04-28 23:52:49.187\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14544, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609202, \"tcp_ack\": 3782496508, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 27, \"timestamp\": 1777400569.690256, \"timestamp_iso\": \"2026-04-28T23:52:49.690256\", \"timestamp_human\": \"2026-04-28 23:52:49.690\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14545, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609202, \"tcp_ack\": 3782496508, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 44, \"timestamp\": 1777400572.897073, \"timestamp_iso\": \"2026-04-28T23:52:52.897073\", \"timestamp_human\": \"2026-04-28 23:52:52.897\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14546, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609507, \"tcp_ack\": 3782496635, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 45, \"timestamp\": 1777400573.473733, \"timestamp_iso\": \"2026-04-28T23:52:53.473733\", \"timestamp_human\": \"2026-04-28 23:52:53.473\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14547, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609507, \"tcp_ack\": 3782496635, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 57, \"timestamp\": 1777400574.110467, \"timestamp_iso\": \"2026-04-28T23:52:54.110467\", \"timestamp_human\": \"2026-04-28 23:52:54.110\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14548, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609812, \"tcp_ack\": 3782496762, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 58, \"timestamp\": 1777400574.576307, \"timestamp_iso\": \"2026-04-28T23:52:54.576307\", \"timestamp_human\": \"2026-04-28 23:52:54.576\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14549, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385609812, \"tcp_ack\": 3782496762, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 70, \"timestamp\": 1777400574.993925, \"timestamp_iso\": \"2026-04-28T23:52:54.993925\", \"timestamp_human\": \"2026-04-28 23:52:54.993\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14550, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610117, \"tcp_ack\": 3782496889, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 71, \"timestamp\": 1777400575.507824, \"timestamp_iso\": \"2026-04-28T23:52:55.507824\", \"timestamp_human\": \"2026-04-28 23:52:55.507\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14551, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610117, \"tcp_ack\": 3782496889, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 83, \"timestamp\": 1777400576.016972, \"timestamp_iso\": \"2026-04-28T23:52:56.016972\", \"timestamp_human\": \"2026-04-28 23:52:56.016\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14552, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610422, \"tcp_ack\": 3782497016, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 84, \"timestamp\": 1777400576.448636, \"timestamp_iso\": \"2026-04-28T23:52:56.448636\", \"timestamp_human\": \"2026-04-28 23:52:56.448\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14553, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610422, \"tcp_ack\": 3782497016, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 97, \"timestamp\": 1777400577.806588, \"timestamp_iso\": \"2026-04-28T23:52:57.806588\", \"timestamp_human\": \"2026-04-28 23:52:57.806\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14554, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610727, \"tcp_ack\": 3782497143, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 98, \"timestamp\": 1777400578.361252, \"timestamp_iso\": \"2026-04-28T23:52:58.361252\", \"timestamp_human\": \"2026-04-28 23:52:58.361\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14555, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385610727, \"tcp_ack\": 3782497143, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 110, \"timestamp\": 1777400578.837584, \"timestamp_iso\": \"2026-04-28T23:52:58.837584\", \"timestamp_human\": \"2026-04-28 23:52:58.837\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14556, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611032, \"tcp_ack\": 3782497270, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 111, \"timestamp\": 1777400579.5005, \"timestamp_iso\": \"2026-04-28T23:52:59.500500\", \"timestamp_human\": \"2026-04-28 23:52:59.500\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14557, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611032, \"tcp_ack\": 3782497270, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 123, \"timestamp\": 1777400580.317319, \"timestamp_iso\": \"2026-04-28T23:53:00.317319\", \"timestamp_human\": \"2026-04-28 23:53:00.317\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14558, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611337, \"tcp_ack\": 3782497397, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 124, \"timestamp\": 1777400580.734961, \"timestamp_iso\": \"2026-04-28T23:53:00.734961\", \"timestamp_human\": \"2026-04-28 23:53:00.734\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14559, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611337, \"tcp_ack\": 3782497397, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 136, \"timestamp\": 1777400581.149039, \"timestamp_iso\": \"2026-04-28T23:53:01.149039\", \"timestamp_human\": \"2026-04-28 23:53:01.149\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14560, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611642, \"tcp_ack\": 3782497524, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 137, \"timestamp\": 1777400581.851787, \"timestamp_iso\": \"2026-04-28T23:53:01.851787\", \"timestamp_human\": \"2026-04-28 23:53:01.851\", \"size\": 359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14561, \"ip_len\": 345, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611642, \"tcp_ack\": 3782497524, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 104, \"payload_preview\": \"3c68746d6c3e3c686561643e3c7469746c653e43757272656e7420495020436865636b3c2f7469746c653e3c2f686561643e3c626f64793e43757272656e7420495020416464726573733a203130392e37302e3130302e363c2f626f64793e3c2f68746d6c3e0d0a\", \"payload_ascii\": \"<html><head><title>Current IP Check</title></head><body>Current IP Address: 109.70.100.6</body></html>\\r\\n\"}, {\"packet_number\": 213, \"timestamp\": 1777400646.999466, \"timestamp_iso\": \"2026-04-28T23:54:06.999466\", \"timestamp_human\": \"2026-04-28 23:54:06.999\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 14562, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611947, \"tcp_ack\": 3782497524, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 216, \"timestamp\": 1777400681.883054, \"timestamp_iso\": \"2026-04-28T23:54:41.883054\", \"timestamp_human\": \"2026-04-28 23:54:41.883\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"132.226.247.73\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50100, \"tcp_seq\": 3385611948, \"tcp_ack\": 3782497525, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 23, \"PSH\": 10, \"FIN\": 1}, \"packet_sizes\": [66, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 359, 54, 54], \"inter_packet_intervals\": [0.0004429817199707031, 1.6528148651123047, 0.14449119567871094, 0.5023000240325928, 3.2068169116973877, 0.5766599178314209, 0.6367340087890625, 0.46584010124206543, 0.4176180362701416, 0.5138988494873047, 0.509148120880127, 0.43166399002075195, 1.3579518795013428, 0.554664134979248, 0.4763319492340088, 0.6629159450531006, 0.8168189525604248, 0.41764211654663086, 0.4140779972076416, 0.7027480602264404, 65.1476788520813, 34.88358807563782], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 114.4928469657898, \"avg_packet_size\": 187.1304347826087, \"packets_per_second\": 0.2008859121729443, \"bytes_per_second\": 37.59186808662401, \"min_packet_size\": 54, \"max_packet_size\": 359, \"median_packet_size\": 54, \"avg_interval\": 5.204220316626809, \"min_interval\": 0.0004429817199707031, \"max_interval\": 65.1476788520813}, {\"source\": \"192.168.122.168\", \"target\": \"188.114.96.0\", \"packet_count\": 49, \"total_bytes\": 5498, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [50104, 50107, 50111, 50112, 50113, 50115, 50117, 50118, 50119], \"dst_ports\": [443], \"first_packet\": 1777400570.549657, \"last_packet\": 1777400582.263481, \"packets\": [{\"packet_number\": 29, \"timestamp\": 1777400570.549657, \"timestamp_iso\": \"2026-04-28T23:52:50.549657\", \"timestamp_human\": \"2026-04-28 23:52:50.549\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30349, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327244, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 31, \"timestamp\": 1777400570.549806, \"timestamp_iso\": \"2026-04-28T23:52:50.549806\", \"timestamp_human\": \"2026-04-28 23:52:50.549\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30350, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327245, \"tcp_ack\": 3685359037, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 32, \"timestamp\": 1777400571.952178, \"timestamp_iso\": \"2026-04-28T23:52:51.952178\", \"timestamp_human\": \"2026-04-28 23:52:51.952\", \"size\": 177, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30351, \"ip_len\": 163, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327245, \"tcp_ack\": 3685359037, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 35, \"timestamp\": 1777400572.219978, \"timestamp_iso\": \"2026-04-28T23:52:52.219978\", \"timestamp_human\": \"2026-04-28 23:52:52.219\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30352, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327368, \"tcp_ack\": 3685361785, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 36, \"timestamp\": 1777400572.229028, \"timestamp_iso\": \"2026-04-28T23:52:52.229028\", \"timestamp_human\": \"2026-04-28 23:52:52.229\", \"size\": 155, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30353, \"ip_len\": 141, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327368, \"tcp_ack\": 3685361785, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 33, \"payload_preview\": \"20f72182de96c8e0e00c0fd5dbe197faa33b6af101acc66642585e31a05116303f\", \"payload_ascii\": \" !\\f\\u000f;j\\u0001fBX^1Q\\u00160?\"}, {\"packet_number\": 39, \"timestamp\": 1777400572.580693, \"timestamp_iso\": \"2026-04-28T23:52:52.580693\", \"timestamp_human\": \"2026-04-28 23:52:52.580\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30354, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327469, \"tcp_ack\": 3685362051, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 40, \"timestamp\": 1777400572.79276, \"timestamp_iso\": \"2026-04-28T23:52:52.792760\", \"timestamp_human\": \"2026-04-28 23:52:52.792\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30355, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327469, \"tcp_ack\": 3685362051, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 42, \"timestamp\": 1777400572.79298, \"timestamp_iso\": \"2026-04-28T23:52:52.792980\", \"timestamp_human\": \"2026-04-28 23:52:52.792\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30356, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50104, \"dst_port\": 443, \"tcp_seq\": 2695327470, \"tcp_ack\": 3685362052, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777400573.507754, \"timestamp_iso\": \"2026-04-28T23:52:53.507754\", \"timestamp_human\": \"2026-04-28 23:52:53.507\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30357, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000321737, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 48, \"timestamp\": 1777400573.507935, \"timestamp_iso\": \"2026-04-28T23:52:53.507935\", \"timestamp_human\": \"2026-04-28 23:52:53.507\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30358, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000321738, \"tcp_ack\": 3056081029, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777400573.508465, \"timestamp_iso\": \"2026-04-28T23:52:53.508465\", \"timestamp_human\": \"2026-04-28 23:52:53.508\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30359, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000321738, \"tcp_ack\": 3056081029, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 53, \"timestamp\": 1777400574.105995, \"timestamp_iso\": \"2026-04-28T23:52:54.105995\", \"timestamp_human\": \"2026-04-28 23:52:54.105\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30360, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000322053, \"tcp_ack\": 3056081152, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 55, \"timestamp\": 1777400574.106189, \"timestamp_iso\": \"2026-04-28T23:52:54.106189\", \"timestamp_human\": \"2026-04-28 23:52:54.106\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30361, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50107, \"dst_port\": 443, \"tcp_seq\": 4000322054, \"tcp_ack\": 3056081153, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 59, \"timestamp\": 1777400574.577683, \"timestamp_iso\": \"2026-04-28T23:52:54.577683\", \"timestamp_human\": \"2026-04-28 23:52:54.577\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30362, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454273, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 61, \"timestamp\": 1777400574.577854, \"timestamp_iso\": \"2026-04-28T23:52:54.577854\", \"timestamp_human\": \"2026-04-28 23:52:54.577\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30363, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454274, \"tcp_ack\": 177481289, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 62, \"timestamp\": 1777400574.578339, \"timestamp_iso\": \"2026-04-28T23:52:54.578339\", \"timestamp_human\": \"2026-04-28 23:52:54.578\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30364, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454274, \"tcp_ack\": 177481289, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 66, \"timestamp\": 1777400574.963151, \"timestamp_iso\": \"2026-04-28T23:52:54.963151\", \"timestamp_human\": \"2026-04-28 23:52:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30365, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454589, \"tcp_ack\": 177481412, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 68, \"timestamp\": 1777400574.963386, \"timestamp_iso\": \"2026-04-28T23:52:54.963386\", \"timestamp_human\": \"2026-04-28 23:52:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30366, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50111, \"dst_port\": 443, \"tcp_seq\": 1533454590, \"tcp_ack\": 177481413, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 72, \"timestamp\": 1777400575.509256, \"timestamp_iso\": \"2026-04-28T23:52:55.509256\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30367, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598044, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 74, \"timestamp\": 1777400575.50945, \"timestamp_iso\": \"2026-04-28T23:52:55.509450\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30368, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598045, \"tcp_ack\": 2760143356, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 75, \"timestamp\": 1777400575.509826, \"timestamp_iso\": \"2026-04-28T23:52:55.509826\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30369, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598045, \"tcp_ack\": 2760143356, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 79, \"timestamp\": 1777400575.91047, \"timestamp_iso\": \"2026-04-28T23:52:55.910470\", \"timestamp_human\": \"2026-04-28 23:52:55.910\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30370, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598360, \"tcp_ack\": 2760143479, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 81, \"timestamp\": 1777400575.910667, \"timestamp_iso\": \"2026-04-28T23:52:55.910667\", \"timestamp_human\": \"2026-04-28 23:52:55.910\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30371, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50112, \"dst_port\": 443, \"tcp_seq\": 2730598361, \"tcp_ack\": 2760143480, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 85, \"timestamp\": 1777400576.449893, \"timestamp_iso\": \"2026-04-28T23:52:56.449893\", \"timestamp_human\": \"2026-04-28 23:52:56.449\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30372, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171960685, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 87, \"timestamp\": 1777400576.450162, \"timestamp_iso\": \"2026-04-28T23:52:56.450162\", \"timestamp_human\": \"2026-04-28 23:52:56.450\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30373, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171960686, \"tcp_ack\": 2210981966, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 88, \"timestamp\": 1777400576.450548, \"timestamp_iso\": \"2026-04-28T23:52:56.450548\", \"timestamp_human\": \"2026-04-28 23:52:56.450\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30374, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171960686, \"tcp_ack\": 2210981966, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 92, \"timestamp\": 1777400577.679861, \"timestamp_iso\": \"2026-04-28T23:52:57.679861\", \"timestamp_human\": \"2026-04-28 23:52:57.679\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30375, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171961001, \"tcp_ack\": 2210982089, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 93, \"timestamp\": 1777400577.755073, \"timestamp_iso\": \"2026-04-28T23:52:57.755073\", \"timestamp_human\": \"2026-04-28 23:52:57.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30376, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171961001, \"tcp_ack\": 2210982089, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 95, \"timestamp\": 1777400577.755274, \"timestamp_iso\": \"2026-04-28T23:52:57.755274\", \"timestamp_human\": \"2026-04-28 23:52:57.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30377, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50113, \"dst_port\": 443, \"tcp_seq\": 3171961002, \"tcp_ack\": 2210982090, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1777400578.362289, \"timestamp_iso\": \"2026-04-28T23:52:58.362289\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30378, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002033, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 101, \"timestamp\": 1777400578.362408, \"timestamp_iso\": \"2026-04-28T23:52:58.362408\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30379, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002034, \"tcp_ack\": 2233452561, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 102, \"timestamp\": 1777400578.362806, \"timestamp_iso\": \"2026-04-28T23:52:58.362806\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30380, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002034, \"tcp_ack\": 2233452561, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 106, \"timestamp\": 1777400578.830605, \"timestamp_iso\": \"2026-04-28T23:52:58.830605\", \"timestamp_human\": \"2026-04-28 23:52:58.830\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30381, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002349, \"tcp_ack\": 2233452684, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 108, \"timestamp\": 1777400578.830814, \"timestamp_iso\": \"2026-04-28T23:52:58.830814\", \"timestamp_human\": \"2026-04-28 23:52:58.830\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30382, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50115, \"dst_port\": 443, \"tcp_seq\": 4248002350, \"tcp_ack\": 2233452685, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 112, \"timestamp\": 1777400579.502199, \"timestamp_iso\": \"2026-04-28T23:52:59.502199\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30383, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848450, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 114, \"timestamp\": 1777400579.502339, \"timestamp_iso\": \"2026-04-28T23:52:59.502339\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30384, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848451, \"tcp_ack\": 2484098480, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 115, \"timestamp\": 1777400579.502822, \"timestamp_iso\": \"2026-04-28T23:52:59.502822\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30385, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848451, \"tcp_ack\": 2484098480, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 119, \"timestamp\": 1777400580.152957, \"timestamp_iso\": \"2026-04-28T23:53:00.152957\", \"timestamp_human\": \"2026-04-28 23:53:00.152\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30386, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848766, \"tcp_ack\": 2484098603, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 121, \"timestamp\": 1777400580.153205, \"timestamp_iso\": \"2026-04-28T23:53:00.153205\", \"timestamp_human\": \"2026-04-28 23:53:00.153\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30387, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50117, \"dst_port\": 443, \"tcp_seq\": 1066848767, \"tcp_ack\": 2484098604, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 125, \"timestamp\": 1777400580.736982, \"timestamp_iso\": \"2026-04-28T23:53:00.736982\", \"timestamp_human\": \"2026-04-28 23:53:00.736\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30388, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412259, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 127, \"timestamp\": 1777400580.737157, \"timestamp_iso\": \"2026-04-28T23:53:00.737157\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30389, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412260, \"tcp_ack\": 2654325686, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 128, \"timestamp\": 1777400580.737805, \"timestamp_iso\": \"2026-04-28T23:53:00.737805\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30390, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412260, \"tcp_ack\": 2654325686, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 132, \"timestamp\": 1777400581.131759, \"timestamp_iso\": \"2026-04-28T23:53:01.131759\", \"timestamp_human\": \"2026-04-28 23:53:01.131\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30391, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412575, \"tcp_ack\": 2654325809, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 134, \"timestamp\": 1777400581.131973, \"timestamp_iso\": \"2026-04-28T23:53:01.131973\", \"timestamp_human\": \"2026-04-28 23:53:01.131\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30392, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50118, \"dst_port\": 443, \"tcp_seq\": 1572412576, \"tcp_ack\": 2654325810, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 138, \"timestamp\": 1777400581.853166, \"timestamp_iso\": \"2026-04-28T23:53:01.853166\", \"timestamp_human\": \"2026-04-28 23:53:01.853\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30393, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216924951, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 140, \"timestamp\": 1777400581.853402, \"timestamp_iso\": \"2026-04-28T23:53:01.853402\", \"timestamp_human\": \"2026-04-28 23:53:01.853\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30394, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216924952, \"tcp_ack\": 2541583212, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 141, \"timestamp\": 1777400581.854101, \"timestamp_iso\": \"2026-04-28T23:53:01.854101\", \"timestamp_human\": \"2026-04-28 23:53:01.854\", \"size\": 369, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30395, \"ip_len\": 355, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216924952, \"tcp_ack\": 2541583212, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 145, \"timestamp\": 1777400582.263233, \"timestamp_iso\": \"2026-04-28T23:53:02.263233\", \"timestamp_human\": \"2026-04-28 23:53:02.263\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30396, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216925267, \"tcp_ack\": 2541583335, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 147, \"timestamp\": 1777400582.263481, \"timestamp_iso\": \"2026-04-28T23:53:02.263481\", \"timestamp_human\": \"2026-04-28 23:53:02.263\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"188.114.96.0\", \"ttl\": 128, \"ip_id\": 30397, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50119, \"dst_port\": 443, \"tcp_seq\": 4216925268, \"tcp_ack\": 2541583336, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 9, \"ACK\": 40, \"PSH\": 10, \"FIN\": 9}, \"packet_sizes\": [66, 54, 177, 54, 155, 54, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54, 66, 54, 369, 54, 54], \"inter_packet_intervals\": [0.00014901161193847656, 1.402371883392334, 0.26780009269714355, 0.00904989242553711, 0.35166501998901367, 0.2120668888092041, 0.0002200603485107422, 0.7147741317749023, 0.00018095970153808594, 0.0005300045013427734, 0.5975298881530762, 0.00019407272338867188, 0.4714939594268799, 0.0001709461212158203, 0.0004851818084716797, 0.3848118782043457, 0.00023508071899414062, 0.5458698272705078, 0.00019407272338867188, 0.00037598609924316406, 0.40064406394958496, 0.00019693374633789062, 0.5392260551452637, 0.0002689361572265625, 0.0003859996795654297, 1.2293131351470947, 0.07521200180053711, 0.0002009868621826172, 0.6070148944854736, 0.00011897087097167969, 0.0003981590270996094, 0.46779894828796387, 0.00020885467529296875, 0.6713850498199463, 0.0001399517059326172, 0.0004830360412597656, 0.6501350402832031, 0.000247955322265625, 0.5837771892547607, 0.00017499923706054688, 0.0006477832794189453, 0.3939540386199951, 0.00021409988403320312, 0.7211930751800537, 0.0002357959747314453, 0.0006990432739257812, 0.4091320037841797, 0.000247955322265625], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 11.713823795318604, \"avg_packet_size\": 112.20408163265306, \"packets_per_second\": 4.183091777390634, \"bytes_per_second\": 469.3599712672185, \"min_packet_size\": 54, \"max_packet_size\": 369, \"median_packet_size\": 54, \"avg_interval\": 0.24403799573580423, \"min_interval\": 0.00011897087097167969, \"max_interval\": 1.402371883392334}, {\"source\": \"188.114.96.0\", \"target\": \"192.168.122.168\", \"packet_count\": 30, \"total_bytes\": 4742, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [443], \"dst_ports\": [50104, 50107, 50111, 50112, 50113, 50115, 50117, 50118, 50119], \"first_packet\": 1777400570.549697, \"last_packet\": 1777400582.263412, \"packets\": [{\"packet_number\": 30, \"timestamp\": 1777400570.549697, \"timestamp_iso\": \"2026-04-28T23:52:50.549697\", \"timestamp_human\": \"2026-04-28 23:52:50.549\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685359036, \"tcp_ack\": 2695327245, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 33, \"timestamp\": 1777400571.952194, \"timestamp_iso\": \"2026-04-28T23:52:51.952194\", \"timestamp_human\": \"2026-04-28 23:52:51.952\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47842, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685359037, \"tcp_ack\": 2695327368, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 34, \"timestamp\": 1777400572.219863, \"timestamp_iso\": \"2026-04-28T23:52:52.219863\", \"timestamp_human\": \"2026-04-28 23:52:52.219\", \"size\": 2802, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47843, \"ip_len\": 2788, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685359037, \"tcp_ack\": 2695327368, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 37, \"timestamp\": 1777400572.229052, \"timestamp_iso\": \"2026-04-28T23:52:52.229052\", \"timestamp_human\": \"2026-04-28 23:52:52.229\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47845, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685361785, \"tcp_ack\": 2695327469, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 38, \"timestamp\": 1777400572.45441, \"timestamp_iso\": \"2026-04-28T23:52:52.454410\", \"timestamp_human\": \"2026-04-28 23:52:52.454\", \"size\": 320, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47846, \"ip_len\": 306, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685361785, \"tcp_ack\": 2695327469, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 48, \"payload_preview\": \"ad0326dc683e28af701b2e02f3346f293b8d24986e8cf6555db24b3f3df455cbb6bb71defa517201f554b5e8d2a322ae\", \"payload_ascii\": \"\\u0003&h>(p\\u001b.\\u00024o);$nU]K?=UqQr\\u0001T\\\"\"}, {\"packet_number\": 41, \"timestamp\": 1777400572.79286, \"timestamp_iso\": \"2026-04-28T23:52:52.792860\", \"timestamp_human\": \"2026-04-28 23:52:52.792\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47847, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50104, \"tcp_seq\": 3685362051, \"tcp_ack\": 2695327470, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 47, \"timestamp\": 1777400573.507822, \"timestamp_iso\": \"2026-04-28T23:52:53.507822\", \"timestamp_human\": \"2026-04-28 23:52:53.507\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50107, \"tcp_seq\": 3056081028, \"tcp_ack\": 4000321738, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 50, \"timestamp\": 1777400573.508493, \"timestamp_iso\": \"2026-04-28T23:52:53.508493\", \"timestamp_human\": \"2026-04-28 23:52:53.508\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35894, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50107, \"tcp_seq\": 3056081029, \"tcp_ack\": 4000322053, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 54, \"timestamp\": 1777400574.106101, \"timestamp_iso\": \"2026-04-28T23:52:54.106101\", \"timestamp_human\": \"2026-04-28 23:52:54.106\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35896, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50107, \"tcp_seq\": 3056081152, \"tcp_ack\": 4000322054, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 60, \"timestamp\": 1777400574.577751, \"timestamp_iso\": \"2026-04-28T23:52:54.577751\", \"timestamp_human\": \"2026-04-28 23:52:54.577\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50111, \"tcp_seq\": 177481288, \"tcp_ack\": 1533454274, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 63, \"timestamp\": 1777400574.578361, \"timestamp_iso\": \"2026-04-28T23:52:54.578361\", \"timestamp_human\": \"2026-04-28 23:52:54.578\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43657, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50111, \"tcp_seq\": 177481289, \"tcp_ack\": 1533454589, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 67, \"timestamp\": 1777400574.963293, \"timestamp_iso\": \"2026-04-28T23:52:54.963293\", \"timestamp_human\": \"2026-04-28 23:52:54.963\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43659, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50111, \"tcp_seq\": 177481412, \"tcp_ack\": 1533454590, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 73, \"timestamp\": 1777400575.509313, \"timestamp_iso\": \"2026-04-28T23:52:55.509313\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50112, \"tcp_seq\": 2760143355, \"tcp_ack\": 2730598045, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 76, \"timestamp\": 1777400575.509846, \"timestamp_iso\": \"2026-04-28T23:52:55.509846\", \"timestamp_human\": \"2026-04-28 23:52:55.509\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 28640, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50112, \"tcp_seq\": 2760143356, \"tcp_ack\": 2730598360, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 80, \"timestamp\": 1777400575.910597, \"timestamp_iso\": \"2026-04-28T23:52:55.910597\", \"timestamp_human\": \"2026-04-28 23:52:55.910\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 28642, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50112, \"tcp_seq\": 2760143479, \"tcp_ack\": 2730598361, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 86, \"timestamp\": 1777400576.449951, \"timestamp_iso\": \"2026-04-28T23:52:56.449951\", \"timestamp_human\": \"2026-04-28 23:52:56.449\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50113, \"tcp_seq\": 2210981965, \"tcp_ack\": 3171960686, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 89, \"timestamp\": 1777400576.450575, \"timestamp_iso\": \"2026-04-28T23:52:56.450575\", \"timestamp_human\": \"2026-04-28 23:52:56.450\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 21766, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50113, \"tcp_seq\": 2210981966, \"tcp_ack\": 3171961001, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1777400577.755152, \"timestamp_iso\": \"2026-04-28T23:52:57.755152\", \"timestamp_human\": \"2026-04-28 23:52:57.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 21768, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50113, \"tcp_seq\": 2210982089, \"tcp_ack\": 3171961002, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 100, \"timestamp\": 1777400578.362333, \"timestamp_iso\": \"2026-04-28T23:52:58.362333\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50115, \"tcp_seq\": 2233452560, \"tcp_ack\": 4248002034, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 103, \"timestamp\": 1777400578.362821, \"timestamp_iso\": \"2026-04-28T23:52:58.362821\", \"timestamp_human\": \"2026-04-28 23:52:58.362\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 29626, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50115, \"tcp_seq\": 2233452561, \"tcp_ack\": 4248002349, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 107, \"timestamp\": 1777400578.830692, \"timestamp_iso\": \"2026-04-28T23:52:58.830692\", \"timestamp_human\": \"2026-04-28 23:52:58.830\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 29628, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50115, \"tcp_seq\": 2233452684, \"tcp_ack\": 4248002350, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 113, \"timestamp\": 1777400579.502254, \"timestamp_iso\": \"2026-04-28T23:52:59.502254\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50117, \"tcp_seq\": 2484098479, \"tcp_ack\": 1066848451, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 116, \"timestamp\": 1777400579.502841, \"timestamp_iso\": \"2026-04-28T23:52:59.502841\", \"timestamp_human\": \"2026-04-28 23:52:59.502\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 42171, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50117, \"tcp_seq\": 2484098480, \"tcp_ack\": 1066848766, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 120, \"timestamp\": 1777400580.153054, \"timestamp_iso\": \"2026-04-28T23:53:00.153054\", \"timestamp_human\": \"2026-04-28 23:53:00.153\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 42173, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50117, \"tcp_seq\": 2484098603, \"tcp_ack\": 1066848767, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 126, \"timestamp\": 1777400580.737054, \"timestamp_iso\": \"2026-04-28T23:53:00.737054\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50118, \"tcp_seq\": 2654325685, \"tcp_ack\": 1572412260, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 129, \"timestamp\": 1777400580.73783, \"timestamp_iso\": \"2026-04-28T23:53:00.737830\", \"timestamp_human\": \"2026-04-28 23:53:00.737\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35703, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50118, \"tcp_seq\": 2654325686, \"tcp_ack\": 1572412575, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 133, \"timestamp\": 1777400581.131848, \"timestamp_iso\": \"2026-04-28T23:53:01.131848\", \"timestamp_human\": \"2026-04-28 23:53:01.131\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 35705, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50118, \"tcp_seq\": 2654325809, \"tcp_ack\": 1572412576, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 139, \"timestamp\": 1777400581.853245, \"timestamp_iso\": \"2026-04-28T23:53:01.853245\", \"timestamp_human\": \"2026-04-28 23:53:01.853\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50119, \"tcp_seq\": 2541583211, \"tcp_ack\": 4216924952, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 142, \"timestamp\": 1777400581.854123, \"timestamp_iso\": \"2026-04-28T23:53:01.854123\", \"timestamp_human\": \"2026-04-28 23:53:01.854\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 64694, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50119, \"tcp_seq\": 2541583212, \"tcp_ack\": 4216925267, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 146, \"timestamp\": 1777400582.263412, \"timestamp_iso\": \"2026-04-28T23:53:02.263412\", \"timestamp_human\": \"2026-04-28 23:53:02.263\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"188.114.96.0\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 64696, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50119, \"tcp_seq\": 2541583335, \"tcp_ack\": 4216925268, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 9, \"ACK\": 30, \"PSH\": 2, \"FIN\": 9}, \"packet_sizes\": [66, 54, 2802, 54, 320, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54, 66, 54, 54], \"inter_packet_intervals\": [1.4024970531463623, 0.2676689624786377, 0.009189128875732422, 0.2253580093383789, 0.33844995498657227, 0.7149620056152344, 0.0006709098815917969, 0.5976080894470215, 0.4716498851776123, 0.0006101131439208984, 0.3849320411682129, 0.5460200309753418, 0.0005328655242919922, 0.40075111389160156, 0.5393538475036621, 0.0006241798400878906, 1.3045768737792969, 0.6071810722351074, 0.00048804283142089844, 0.46787095069885254, 0.6715619564056396, 0.0005869865417480469, 0.6502130031585693, 0.5840001106262207, 0.0007758140563964844, 0.39401817321777344, 0.7213969230651855, 0.0008780956268310547, 0.4092888832092285], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 11.713715076446533, \"avg_packet_size\": 158.06666666666666, \"packets_per_second\": 2.5611003686031935, \"bytes_per_second\": 404.8245982638781, \"min_packet_size\": 54, \"max_packet_size\": 2802, \"median_packet_size\": 54, \"avg_interval\": 0.4039212095326391, \"min_interval\": 0.00048804283142089844, \"max_interval\": 1.4024970531463623}, {\"source\": \"192.168.122.168\", \"target\": \"149.154.166.110\", \"packet_count\": 9, \"total_bytes\": 1150, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [50120], \"dst_ports\": [443], \"first_packet\": 1777400584.708655, \"last_packet\": 1777400685.90138, \"packets\": [{\"packet_number\": 148, \"timestamp\": 1777400584.708655, \"timestamp_iso\": \"2026-04-28T23:53:04.708655\", \"timestamp_human\": \"2026-04-28 23:53:04.708\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1757, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238386, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 150, \"timestamp\": 1777400584.708829, \"timestamp_iso\": \"2026-04-28T23:53:04.708829\", \"timestamp_human\": \"2026-04-28 23:53:04.708\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1758, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238387, \"tcp_ack\": 4075040322, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 151, \"timestamp\": 1777400584.709588, \"timestamp_iso\": \"2026-04-28T23:53:04.709588\", \"timestamp_human\": \"2026-04-28 23:53:04.709\", \"size\": 232, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1759, \"ip_len\": 218, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238387, \"tcp_ack\": 4075040322, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 154, \"timestamp\": 1777400585.124903, \"timestamp_iso\": \"2026-04-28T23:53:05.124903\", \"timestamp_human\": \"2026-04-28 23:53:05.124\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1760, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238565, \"tcp_ack\": 4075043738, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 156, \"timestamp\": 1777400585.324448, \"timestamp_iso\": \"2026-04-28T23:53:05.324448\", \"timestamp_human\": \"2026-04-28 23:53:05.324\", \"size\": 147, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1761, \"ip_len\": 133, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238565, \"tcp_ack\": 4075044634, \"tcp_window\": 8209, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 33, \"payload_preview\": \"20c0b48c554b5e79939451754eb4f25aa46b912390a18ebf5d685de2780dc7786a\", \"payload_ascii\": \" UK^yQuNZk#]h]x\\rxj\"}, {\"packet_number\": 159, \"timestamp\": 1777400585.694893, \"timestamp_iso\": \"2026-04-28T23:53:05.694893\", \"timestamp_human\": \"2026-04-28 23:53:05.694\", \"size\": 435, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1762, \"ip_len\": 421, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902238658, \"tcp_ack\": 4075044908, \"tcp_window\": 8207, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 162, \"timestamp\": 1777400585.978378, \"timestamp_iso\": \"2026-04-28T23:53:05.978378\", \"timestamp_human\": \"2026-04-28 23:53:05.978\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1763, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902239039, \"tcp_ack\": 4075045341, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 217, \"timestamp\": 1777400685.901105, \"timestamp_iso\": \"2026-04-28T23:54:45.901105\", \"timestamp_human\": \"2026-04-28 23:54:45.901\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1764, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902239039, \"tcp_ack\": 4075045341, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 219, \"timestamp\": 1777400685.90138, \"timestamp_iso\": \"2026-04-28T23:54:45.901380\", \"timestamp_human\": \"2026-04-28 23:54:45.901\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"149.154.166.110\", \"ttl\": 128, \"ip_id\": 1765, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50120, \"dst_port\": 443, \"tcp_seq\": 902239040, \"tcp_ack\": 4075045342, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 8, \"PSH\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 54, 232, 54, 147, 435, 54, 54, 54], \"inter_packet_intervals\": [0.00017380714416503906, 0.000759124755859375, 0.4153149127960205, 0.19954514503479004, 0.37044477462768555, 0.28348517417907715, 99.92272686958313, 0.0002751350402832031], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 101.19272494316101, \"avg_packet_size\": 127.77777777777777, \"packets_per_second\": 0.08893919997761908, \"bytes_per_second\": 11.36445333047355, \"min_packet_size\": 54, \"max_packet_size\": 435, \"median_packet_size\": 54, \"avg_interval\": 12.649090617895126, \"min_interval\": 0.00017380714416503906, \"max_interval\": 99.92272686958313}, {\"source\": \"149.154.166.110\", \"target\": \"192.168.122.168\", \"packet_count\": 9, \"total_bytes\": 5517, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [50120], \"first_packet\": 1777400584.708715, \"last_packet\": 1777400685.901261, \"packets\": [{\"packet_number\": 149, \"timestamp\": 1777400584.708715, \"timestamp_iso\": \"2026-04-28T23:53:04.708715\", \"timestamp_human\": \"2026-04-28 23:53:04.708\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075040321, \"tcp_ack\": 902238387, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 152, \"timestamp\": 1777400584.709613, \"timestamp_iso\": \"2026-04-28T23:53:04.709613\", \"timestamp_human\": \"2026-04-28 23:53:04.709\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47653, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075040322, \"tcp_ack\": 902238565, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 153, \"timestamp\": 1777400585.124668, \"timestamp_iso\": \"2026-04-28T23:53:05.124668\", \"timestamp_human\": \"2026-04-28 23:53:05.124\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47654, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075040322, \"tcp_ack\": 902238565, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 155, \"timestamp\": 1777400585.30433, \"timestamp_iso\": \"2026-04-28T23:53:05.304330\", \"timestamp_human\": \"2026-04-28 23:53:05.304\", \"size\": 950, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47657, \"ip_len\": 936, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075043738, \"tcp_ack\": 902238565, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 896, \"payload_preview\": \"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\", \"payload_ascii\": \" C\\u0001;I'\\u001bNp2\\u0001\\u0005>\\u0007NO/Y0\\\"\\u0019Vk\\u0007\\u0016u9Q{5tN\\u0013?\\u0003\\u0015j\\u007f\\u000b\\u0019\\u0014\\u0005\\u0004;F|2\\r\\u0000f\\\"im6\\u0011\\u0018\\u001c`8\\u0002F\\u0007\\n>]||+SbiQ%\\u0005a\\u001aD,C#:\\u000e)\\u001c]\\u001e0\\n9K]2bC%4\\u0002V'\\u0001;p*?n\\u0001}Sm`,X_F\\u001b\\u0003<\\tI1\\\\iFG\\u0002\\u0003\\u0001\\u0000\\u0001B0@0\\u000f\\u0006\\u0003U\\u001d\\u0013\\u0001\\u0001\\u0004\\u00050\\u0003\\u0001\\u00010\\u000e\\u0006\\u0003U\\u001d\\u000f\\u0001\\u0001\\u0004\\u0004\\u0003\\u0002\\u0001\\u00060\\u001d\\u0006\\u0003U\\u001d\\u000e\\u0004\\u0016\\u0004\\u0014:\\u0007\\u0010g(\\u0005An \\u000f0\\r\\u0006\\t*H\\r\\u0001\\u0001\\u000b\\u0005\\u0000\\u0003\\u0001\\u0001\\u0000]yYg\\u0003a~;\\u00061u- Oe/Zts8B\\u0005{\\u0002u\\u0013S\\u0010~F.+\\u0011'Z7l\\u0017=$Oy5_\\u0004\\u0002-\\u0010\\u0004s@r%h\\u0012W\\u0012:\\tD\\u0006\\u0015728d,~\\u0014\\u0002\\u0007h\\u0017\\\"8-zTi_3z={\\n\\u007f_9uv\\u00183,/LOJT\\u0006\\u007f}\\b\\u000f\\u001c~\\u0017^\\u0016C\\t\\fMkezD\\\\\\u001c\\u0016\\u0003\\u0003\\u0001,\\f\\u0000\\u0001(\\u0003\\u0000\\u001d :L(d\\u0000pv-\\n\\u0010\\u0013ghh\\u0003c3s{o/\\b\\u0004\\u0001\\u0000[,M\\u001b4\\tj\\\\\\u0003\\u0006k02R\\u001d\\u000e{\\u001aO\\u001a#\\u0001[\\u0006ro.L#ExjZR6Cdw~x>]%z\\u001blV{(f\\u0013\\u0018 ]4\\u001a\\u00120m|k\\u0012\\ne\\u0018B\\u0002GpLPxqd#\\\"r,B\\u0001So\\u001bT<\\u0018Rg\\r; t|\\\\\\u001d;~\\u0005\\t7\\u0002Z\\u0007\\u0012a?v3Z{\\u0012K.\\\\v27s\\u000f|z\\\" Y\\u0011\\u0017@\\b\\u0011%\\\\n\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 157, \"timestamp\": 1777400585.32451, \"timestamp_iso\": \"2026-04-28T23:53:05.324510\", \"timestamp_human\": \"2026-04-28 23:53:05.324\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47658, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044634, \"tcp_ack\": 902238658, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 158, \"timestamp\": 1777400585.685178, \"timestamp_iso\": \"2026-04-28T23:53:05.685178\", \"timestamp_human\": \"2026-04-28 23:53:05.685\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47659, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044634, \"tcp_ack\": 902238658, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"76e06e755dd04c94d375afbeef4f85b4dbf9948eafb55f676bde3bf13ef41791b1711392f14a37ad\", \"payload_ascii\": \"vnu]LuO_gk;>\\u0017q\\u0013J7\"}, {\"packet_number\": 160, \"timestamp\": 1777400585.69494, \"timestamp_iso\": \"2026-04-28T23:53:05.694940\", \"timestamp_human\": \"2026-04-28 23:53:05.694\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47660, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044908, \"tcp_ack\": 902239039, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 161, \"timestamp\": 1777400585.888191, \"timestamp_iso\": \"2026-04-28T23:53:05.888191\", \"timestamp_human\": \"2026-04-28 23:53:05.888\", \"size\": 487, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47661, \"ip_len\": 473, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075044908, \"tcp_ack\": 902239039, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 218, \"timestamp\": 1777400685.901261, \"timestamp_iso\": \"2026-04-28T23:54:45.901261\", \"timestamp_human\": \"2026-04-28 23:54:45.901\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"149.154.166.110\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 47662, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 50120, \"tcp_seq\": 4075045341, \"tcp_ack\": 902239040, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 4, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 950, 54, 328, 54, 487, 54], \"inter_packet_intervals\": [0.0008981227874755859, 0.4150547981262207, 0.17966222763061523, 0.02017998695373535, 0.3606679439544678, 0.009762048721313477, 0.1932508945465088, 100.01307010650635], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 101.19254612922668, \"avg_packet_size\": 613.0, \"packets_per_second\": 0.08893935713907881, \"bytes_per_second\": 54.519825926255315, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 66, \"avg_interval\": 12.649068266153336, \"min_interval\": 0.0008981227874755859, \"max_interval\": 100.01307010650635}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.42.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49957], \"dst_ports\": [443], \"first_packet\": 1777400588.044914, \"last_packet\": 1777400607.879449, \"packets\": [{\"packet_number\": 163, \"timestamp\": 1777400588.044914, \"timestamp_iso\": \"2026-04-28T23:53:08.044914\", \"timestamp_human\": \"2026-04-28 23:53:08.044\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10777, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 173, \"timestamp\": 1777400588.481693, \"timestamp_iso\": \"2026-04-28T23:53:08.481693\", \"timestamp_human\": \"2026-04-28 23:53:08.481\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10778, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 179, \"timestamp\": 1777400589.182699, \"timestamp_iso\": \"2026-04-28T23:53:09.182699\", \"timestamp_human\": \"2026-04-28 23:53:09.182\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10779, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 185, \"timestamp\": 1777400590.583021, \"timestamp_iso\": \"2026-04-28T23:53:10.583021\", \"timestamp_human\": \"2026-04-28 23:53:10.583\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10780, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 191, \"timestamp\": 1777400593.083893, \"timestamp_iso\": \"2026-04-28T23:53:13.083893\", \"timestamp_human\": \"2026-04-28 23:53:13.083\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10781, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 200, \"timestamp\": 1777400598.081676, \"timestamp_iso\": \"2026-04-28T23:53:18.081676\", \"timestamp_human\": \"2026-04-28 23:53:18.081\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10782, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378438, \"tcp_ack\": 1765244119, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 209, \"timestamp\": 1777400607.879449, \"timestamp_iso\": \"2026-04-28T23:53:27.879449\", \"timestamp_human\": \"2026-04-28 23:53:27.879\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.42.254\", \"ttl\": 128, \"ip_id\": 10783, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49957, \"dst_port\": 443, \"tcp_seq\": 4194378439, \"tcp_ack\": 1765244119, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.4367790222167969, 0.7010059356689453, 1.4003219604492188, 2.5008721351623535, 4.997782945632935, 9.797772884368896], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.834534883499146, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3529197957560113, \"bytes_per_second\": 19.05766897082461, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.3057558139165244, \"min_interval\": 0.4367790222167969, \"max_interval\": 9.797772884368896}, {\"source\": \"192.168.122.168\", \"target\": \"131.253.33.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49956], \"dst_ports\": [443], \"first_packet\": 1777400588.045094, \"last_packet\": 1777400607.571525, \"packets\": [{\"packet_number\": 164, \"timestamp\": 1777400588.045094, \"timestamp_iso\": \"2026-04-28T23:53:08.045094\", \"timestamp_human\": \"2026-04-28 23:53:08.045\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42256, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 169, \"timestamp\": 1777400588.372311, \"timestamp_iso\": \"2026-04-28T23:53:08.372311\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42257, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 175, \"timestamp\": 1777400589.075432, \"timestamp_iso\": \"2026-04-28T23:53:09.075432\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42258, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 181, \"timestamp\": 1777400590.473677, \"timestamp_iso\": \"2026-04-28T23:53:10.473677\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42259, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 187, \"timestamp\": 1777400592.97399, \"timestamp_iso\": \"2026-04-28T23:53:12.973990\", \"timestamp_human\": \"2026-04-28 23:53:12.973\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42260, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 196, \"timestamp\": 1777400597.862912, \"timestamp_iso\": \"2026-04-28T23:53:17.862912\", \"timestamp_human\": \"2026-04-28 23:53:17.862\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42261, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739733, \"tcp_ack\": 4241599660, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 205, \"timestamp\": 1777400607.571525, \"timestamp_iso\": \"2026-04-28T23:53:27.571525\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"131.253.33.254\", \"ttl\": 128, \"ip_id\": 42262, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49956, \"dst_port\": 443, \"tcp_seq\": 1857739734, \"tcp_ack\": 4241599660, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.32721710205078125, 0.7031209468841553, 1.398244857788086, 2.5003130435943604, 4.8889219760894775, 9.708613157272339], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.5264310836792, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35848844932297014, \"bytes_per_second\": 19.358376263440388, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.2544051806131997, \"min_interval\": 0.32721710205078125, \"max_interval\": 9.708613157272339}, {\"source\": \"192.168.122.168\", \"target\": \"13.107.3.254\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49955], \"dst_ports\": [443], \"first_packet\": 1777400588.050531, \"last_packet\": 1777400607.879573, \"packets\": [{\"packet_number\": 165, \"timestamp\": 1777400588.050531, \"timestamp_iso\": \"2026-04-28T23:53:08.050531\", \"timestamp_human\": \"2026-04-28 23:53:08.050\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22826, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 174, \"timestamp\": 1777400588.481859, \"timestamp_iso\": \"2026-04-28T23:53:08.481859\", \"timestamp_human\": \"2026-04-28 23:53:08.481\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22827, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 180, \"timestamp\": 1777400589.182842, \"timestamp_iso\": \"2026-04-28T23:53:09.182842\", \"timestamp_human\": \"2026-04-28 23:53:09.182\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 186, \"timestamp\": 1777400590.583099, \"timestamp_iso\": \"2026-04-28T23:53:10.583099\", \"timestamp_human\": \"2026-04-28 23:53:10.583\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 192, \"timestamp\": 1777400593.083985, \"timestamp_iso\": \"2026-04-28T23:53:13.083985\", \"timestamp_human\": \"2026-04-28 23:53:13.083\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 201, \"timestamp\": 1777400598.081815, \"timestamp_iso\": \"2026-04-28T23:53:18.081815\", \"timestamp_human\": \"2026-04-28 23:53:18.081\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304944, \"tcp_ack\": 1203919404, \"tcp_window\": 1019, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 210, \"timestamp\": 1777400607.879573, \"timestamp_iso\": \"2026-04-28T23:53:27.879573\", \"timestamp_human\": \"2026-04-28 23:53:27.879\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"13.107.3.254\", \"ttl\": 128, \"ip_id\": 22832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49955, \"dst_port\": 443, \"tcp_seq\": 654304945, \"tcp_ack\": 1203919404, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.43132805824279785, 0.7009830474853516, 1.400256872177124, 2.5008862018585205, 4.997829914093018, 9.797758102416992], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.829042196273804, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35301755529651413, \"bytes_per_second\": 19.062947986011764, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.304840366045634, \"min_interval\": 0.43132805824279785, \"max_interval\": 9.797758102416992}, {\"source\": \"192.168.122.168\", \"target\": \"150.171.28.12\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49687], \"dst_ports\": [443], \"first_packet\": 1777400588.052597, \"last_packet\": 1777400607.571638, \"packets\": [{\"packet_number\": 166, \"timestamp\": 1777400588.052597, \"timestamp_iso\": \"2026-04-28T23:53:08.052597\", \"timestamp_human\": \"2026-04-28 23:53:08.052\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64247, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 170, \"timestamp\": 1777400588.372445, \"timestamp_iso\": \"2026-04-28T23:53:08.372445\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64248, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 176, \"timestamp\": 1777400589.075568, \"timestamp_iso\": \"2026-04-28T23:53:09.075568\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64249, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 182, \"timestamp\": 1777400590.473772, \"timestamp_iso\": \"2026-04-28T23:53:10.473772\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64250, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 188, \"timestamp\": 1777400592.974096, \"timestamp_iso\": \"2026-04-28T23:53:12.974096\", \"timestamp_human\": \"2026-04-28 23:53:12.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64251, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 197, \"timestamp\": 1777400597.863021, \"timestamp_iso\": \"2026-04-28T23:53:17.863021\", \"timestamp_human\": \"2026-04-28 23:53:17.863\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64252, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098708, \"tcp_ack\": 3550148941, \"tcp_window\": 1024, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 206, \"timestamp\": 1777400607.571638, \"timestamp_iso\": \"2026-04-28T23:53:27.571638\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"150.171.28.12\", \"ttl\": 128, \"ip_id\": 64253, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49687, \"dst_port\": 443, \"tcp_seq\": 92098709, \"tcp_ack\": 3550148941, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.31984806060791016, 0.7031228542327881, 1.3982040882110596, 2.500324010848999, 4.888924837112427, 9.708617210388184], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.519041061401367, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586241751313492, \"bytes_per_second\": 19.365705457092858, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.253173510233561, \"min_interval\": 0.31984806060791016, \"max_interval\": 9.708617210388184}, {\"source\": \"192.168.122.168\", \"target\": \"204.79.197.222\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49958], \"dst_ports\": [443], \"first_packet\": 1777400588.052694, \"last_packet\": 1777400607.571665, \"packets\": [{\"packet_number\": 167, \"timestamp\": 1777400588.052694, \"timestamp_iso\": \"2026-04-28T23:53:08.052694\", \"timestamp_human\": \"2026-04-28 23:53:08.052\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 340, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 171, \"timestamp\": 1777400588.372465, \"timestamp_iso\": \"2026-04-28T23:53:08.372465\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 341, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 177, \"timestamp\": 1777400589.075588, \"timestamp_iso\": \"2026-04-28T23:53:09.075588\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 342, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 183, \"timestamp\": 1777400590.473793, \"timestamp_iso\": \"2026-04-28T23:53:10.473793\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 343, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 189, \"timestamp\": 1777400592.974116, \"timestamp_iso\": \"2026-04-28T23:53:12.974116\", \"timestamp_human\": \"2026-04-28 23:53:12.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 344, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 198, \"timestamp\": 1777400597.863041, \"timestamp_iso\": \"2026-04-28T23:53:17.863041\", \"timestamp_human\": \"2026-04-28 23:53:17.863\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733383, \"tcp_ack\": 974826609, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 207, \"timestamp\": 1777400607.571665, \"timestamp_iso\": \"2026-04-28T23:53:27.571665\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"204.79.197.222\", \"ttl\": 128, \"ip_id\": 346, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49958, \"dst_port\": 443, \"tcp_seq\": 4216733384, \"tcp_ack\": 974826609, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.31977081298828125, 0.7031230926513672, 1.398205041885376, 2.5003230571746826, 4.888924837112427, 9.708624124526978], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.51897096633911, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.3586254629955468, \"bytes_per_second\": 19.36577500175953, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.253161827723185, \"min_interval\": 0.31977081298828125, \"max_interval\": 9.708624124526978}, {\"source\": \"192.168.122.168\", \"target\": \"23.48.245.217\", \"packet_count\": 7, \"total_bytes\": 378, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [49954], \"dst_ports\": [443], \"first_packet\": 1777400588.061058, \"last_packet\": 1777400607.571693, \"packets\": [{\"packet_number\": 168, \"timestamp\": 1777400588.061058, \"timestamp_iso\": \"2026-04-28T23:53:08.061058\", \"timestamp_human\": \"2026-04-28 23:53:08.061\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4828, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 172, \"timestamp\": 1777400588.372483, \"timestamp_iso\": \"2026-04-28T23:53:08.372483\", \"timestamp_human\": \"2026-04-28 23:53:08.372\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4829, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 178, \"timestamp\": 1777400589.075606, \"timestamp_iso\": \"2026-04-28T23:53:09.075606\", \"timestamp_human\": \"2026-04-28 23:53:09.075\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4830, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 184, \"timestamp\": 1777400590.473811, \"timestamp_iso\": \"2026-04-28T23:53:10.473811\", \"timestamp_human\": \"2026-04-28 23:53:10.473\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4831, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 190, \"timestamp\": 1777400592.974133, \"timestamp_iso\": \"2026-04-28T23:53:12.974133\", \"timestamp_human\": \"2026-04-28 23:53:12.974\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4832, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 199, \"timestamp\": 1777400597.863058, \"timestamp_iso\": \"2026-04-28T23:53:17.863058\", \"timestamp_human\": \"2026-04-28 23:53:17.863\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4833, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525659, \"tcp_ack\": 1444010957, \"tcp_window\": 1021, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 208, \"timestamp\": 1777400607.571693, \"timestamp_iso\": \"2026-04-28T23:53:27.571693\", \"timestamp_human\": \"2026-04-28 23:53:27.571\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"23.48.245.217\", \"ttl\": 128, \"ip_id\": 4834, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49954, \"dst_port\": 443, \"tcp_seq\": 226525660, \"tcp_ack\": 1444010957, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"FIN\": 6, \"ACK\": 7, \"RST\": 1}, \"packet_sizes\": [54, 54, 54, 54, 54, 54, 54], \"inter_packet_intervals\": [0.31142497062683105, 0.7031230926513672, 1.3982048034667969, 2.500322103500366, 4.888925075531006, 9.708634853363037], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 19.510634899139404, \"avg_packet_size\": 54.0, \"packets_per_second\": 0.35877868845307354, \"bytes_per_second\": 19.37404917646597, \"min_packet_size\": 54, \"max_packet_size\": 54, \"median_packet_size\": 54, \"avg_interval\": 3.251772483189901, \"min_interval\": 0.31142497062683105, \"max_interval\": 9.708634853363037}, {\"source\": \"192.168.122.168\", \"target\": \"162.251.85.202\", \"packet_count\": 4, \"total_bytes\": 228, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [50121], \"dst_ports\": [587], \"first_packet\": 1777400594.012671, \"last_packet\": 1777400607.980655, \"packets\": [{\"packet_number\": 193, \"timestamp\": 1777400594.012671, \"timestamp_iso\": \"2026-04-28T23:53:14.012671\", \"timestamp_human\": \"2026-04-28 23:53:14.012\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31310, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562734, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 195, \"timestamp\": 1777400594.012854, \"timestamp_iso\": \"2026-04-28T23:53:14.012854\", \"timestamp_human\": \"2026-04-28 23:53:14.012\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31311, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562735, \"tcp_ack\": 898325473, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 204, \"timestamp\": 1777400605.368539, \"timestamp_iso\": \"2026-04-28T23:53:25.368539\", \"timestamp_human\": \"2026-04-28 23:53:25.368\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31312, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562735, \"tcp_ack\": 898325581, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 211, \"timestamp\": 1777400607.980655, \"timestamp_iso\": \"2026-04-28T23:53:27.980655\", \"timestamp_human\": \"2026-04-28 23:53:27.980\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"162.251.85.202\", \"ttl\": 128, \"ip_id\": 31313, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50121, \"dst_port\": 587, \"tcp_seq\": 2808562735, \"tcp_ack\": 898325581, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 54, 54, 54], \"inter_packet_intervals\": [0.00018310546875, 11.355684995651245, 2.6121158599853516], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 13.967983961105347, \"avg_packet_size\": 57.0, \"packets_per_second\": 0.28636917189611827, \"bytes_per_second\": 16.323042798078742, \"min_packet_size\": 54, \"max_packet_size\": 66, \"median_packet_size\": 54, \"avg_interval\": 4.655994653701782, \"min_interval\": 0.00018310546875, \"max_interval\": 11.355684995651245}, {\"source\": \"162.251.85.202\", \"target\": \"192.168.122.168\", \"packet_count\": 4, \"total_bytes\": 335, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [587], \"dst_ports\": [50121], \"first_packet\": 1777400594.01273, \"last_packet\": 1777400607.980698, \"packets\": [{\"packet_number\": 194, \"timestamp\": 1777400594.01273, \"timestamp_iso\": \"2026-04-28T23:53:14.012730\", \"timestamp_human\": \"2026-04-28 23:53:14.012\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325472, \"tcp_ack\": 2808562735, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 202, \"timestamp\": 1777400605.368126, \"timestamp_iso\": \"2026-04-28T23:53:25.368126\", \"timestamp_human\": \"2026-04-28 23:53:25.368\", \"size\": 161, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 7336, \"ip_len\": 147, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325473, \"tcp_ack\": 2808562735, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 107, \"payload_preview\": \"3535302d225b3230332e35352e38312e315d3a333730373220697320696e20616e2052424c206f6e20626c2e70726f312e7765627369746577656c636f6d652e636f6d2c207365650d0a35353020426c6f636b6564202d20426f746e657420446574656e74696f6e220d0a\", \"payload_ascii\": \"550-\\\"[203.55.81.1]:37072 is in an RBL on bl.pro1.websitewelcome.com, see\\r\\n550 Blocked - Botnet Detention\\\"\\r\\n\"}, {\"packet_number\": 203, \"timestamp\": 1777400605.368166, \"timestamp_iso\": \"2026-04-28T23:53:25.368166\", \"timestamp_human\": \"2026-04-28 23:53:25.368\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 7337, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325580, \"tcp_ack\": 2808562735, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 212, \"timestamp\": 1777400607.980698, \"timestamp_iso\": \"2026-04-28T23:53:27.980698\", \"timestamp_human\": \"2026-04-28 23:53:27.980\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"162.251.85.202\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 587, \"dst_port\": 50121, \"tcp_seq\": 898325581, \"tcp_ack\": 2808562736, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 4, \"PSH\": 1, \"FIN\": 1}, \"packet_sizes\": [66, 161, 54, 54], \"inter_packet_intervals\": [11.355396032333374, 4.00543212890625e-05, 2.612532138824463], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 13.967968225479126, \"avg_packet_size\": 83.75, \"packets_per_second\": 0.28636949450554705, \"bytes_per_second\": 23.983445164839562, \"min_packet_size\": 54, \"max_packet_size\": 161, \"median_packet_size\": 66, \"avg_interval\": 4.655989408493042, \"min_interval\": 4.00543212890625e-05, \"max_interval\": 11.355396032333374}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69f21bf559a6632dae07de81"},"sha256":"360e6f2288b6c8364159e80330b9af83f2d561929d206bc1e1e5f1585432b28f","timestamp":{"$date":"2026-04-29T20:37:12.860Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\nip-api.com,208.95.112.1,HTTP Host,0/70,Neutral,No,External\nhttp://ip-api.com,208.95.112.1,HTTP URL,0/70,Neutral,No,External\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_52_zp8bi.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #5\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #6\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #7\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #8\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #9\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #10\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #12\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #13\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #14\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #15\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #16\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.....]8#....).F...0.....^.\"\".&Z.;.k..7..\\.}...`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\n####\nT 46.105.59.197:21 -> 192.168.122.168:50062 [AP] #20\n220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------.\n220-You are user number 1 of 50 allowed..\n220-Local time is now 14:29. Server port: 21..\n220-IPv6 connections are also welcome on this server..\n220 You will be disconnected after 15 minutes of inactivity..\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50062 -> 46.105.59.197:21 [AP] #21\nUSER admin_syn.\"\n0.0,NGrep,##,\"Payload: T 46.105.59.197:21 -> 192.168.122.168:50062 [AP] #23\n331 User admin_syn OK. Password required.\"\n0.0,NGrep,#,\"Payload: T 192.168.122.168:50062 -> 46.105.59.197:21 [AP] #24\nPASS Black900.\"\n0.0,NGrep,###,\"Payload: T 46.105.59.197:21 -> 192.168.122.168:50062 [AP] #27\n530 Login authentication failed.\"\n0.0,NGrep,#########,\"Payload: T 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #36\n....\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #38\n/...\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #40\nCredentials_DESKTOP-JLCUPK0_20260409_024826.zip\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #42\nv.......\n##\nT 192.168.122.168:50095 -> 185.163.204.93:8080 [AP] #44\nPK...........\\............\n...Passwords/PK.............\\............\n.................Passwords/PK..........8...(.....\n###########\nT 192.168.122.168:50101 -> 208.95.112.1:80 [AP] #55\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\nConnection: Keep-Alive.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50101 [AP] #57\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:29:46 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 38.\nX-Rl: 43.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [AP] #59\n....\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [AP] #61\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #63\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #65\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #67\n.\n####\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #71\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #73\n.\n##\nT 192.168.122.168:50096 -> 185.163.204.93:8080 [A] #75\n.\n##############\nT 192.168.122.168:50145 -> 208.95.112.1:80 [AP] #89\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50145 [AP] #91\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:30:53 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 0.\nX-Rl: 40.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n#\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [AP] #92\n....\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [AP] #94\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n###\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #97\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #99\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #101\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #103\n.\n##\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #105\n.\n####\nT 192.168.122.168:50144 -> 185.163.204.93:8080 [A] #109\n.\n##############\nT 192.168.122.168:50162 -> 208.95.112.1:80 [AP] #123\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50162 [AP] #125\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:31:58 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 60.\nX-Rl: 44.\n.\n{\"\"countryCode\"\":\"\"US\"\"}\n#\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [AP] #126\n....\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [AP] #128\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"US\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n###\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #131\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #133\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #135\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #137\n.\n####\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #141\n.\n##\nT 192.168.122.168:50161 -> 185.163.204.93:8080 [A] #143\n.\n##############\nT 192.168.122.168:50177 -> 208.95.112.1:80 [AP] #157\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50177 [AP] #159\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:33:04 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 30.\nX-Rl: 42.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n#\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [AP] #160\n....\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [AP] #162\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n###\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #165\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #167\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #169\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #171\n.\n##\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #173\n.\n####\nT 192.168.122.168:50176 -> 185.163.204.93:8080 [A] #177\n.\n##############\nT 192.168.122.168:50181 -> 208.95.112.1:80 [AP] #191\nGET /json/?fields=countryCode HTTP/1.1.\nUser-Agent: Mozilla/5.0.\nHost: ip-api.com.\n.\"\n0.0,NGrep,##,\"Payload: T 208.95.112.1:80 -> 192.168.122.168:50181 [AP] #193\nHTTP/1.1 200 OK.\nDate: Wed, 29 Apr 2026 14:34:09 GMT.\nContent-Type: application/json; charset=utf-8.\nContent-Length: 20.\nAccess-Control-Allow-Origin: *.\nX-Ttl: 60.\nX-Rl: 44.\n.\n{\"\"countryCode\"\":\"\"NL\"\"}\n#\nT 192.168.122.168:50180 -> 185.163.204.93:8080 [AP] #194\n....\n##\nT 192.168.122.168:50180 -> 185.163.204.93:8080 [AP] #196\n{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\n##exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmp5x9cm1vp/tshark/stats/tshark_io_graph.txt\n0.0,Forensics,Object Extracted: %3ffields=countryCode,Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode\n0.0,Forensics,Object Extracted: %3ffields=countryCode(2),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(2)\n0.0,Forensics,Object Extracted: %3ffields=countryCode(3),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(3)\n0.0,Forensics,Object Extracted: %3ffields=countryCode(4),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(4)\n0.0,Forensics,Object Extracted: object44,Path: /tmp/tmp5x9cm1vp/tshark/objects/object44\n0.0,Forensics,Object Extracted: %3ffields=countryCode(1),Path: /tmp/tmp5x9cm1vp/tshark/objects/%3ffields=countryCode(1)\n1777472955.876067,Credential,Auth Success: Cleartext (Unknown),\"User: None, Method: Pattern Match\"\n1777472956.258995,Credential,Auth Success: Cleartext (Unknown),\"User: None, Method: Pattern Match\"\n1777472983.359526,Forensics,File Carved: zip,\"Path: /tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_0.zip, Stream: 185.163.204.93:8080-192.168.122.168:50095_fwd\"\n1777472983.359526,Forensics,File Carved: docx,\"Path: /tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_1.docx, Stream: 185.163.204.93:8080-192.168.122.168:50095_fwd\"\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-29T20:37:10.275734,185.163.204.93:8080->192.168.122.168:50095,185.163.204.93,8080,192.168.122.168,50095,HTTP,carved_185.163.204.93:8080-192.168.122.168:50095_fwd_1.docx,docx,/tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_1.docx,22,d651090b5f80153278ceb966858b9437,d540db68b327a7cbbd40cf9cfef4a676b86b94381779f3c58a481bb7ac966592,1.95,,50 4b 05 06 00 00 00 00 01 00 01 00 38 00 00 00 28 00 00 00 00 00\n2026-04-29T20:37:10.275390,185.163.204.93:8080->192.168.122.168:50095,185.163.204.93,8080,192.168.122.168,50095,HTTP,carved_185.163.204.93:8080-192.168.122.168:50095_fwd_0.zip,zip,/tmp/tmp5x9cm1vp/carved_files/carved_185.163.204.93:8080-192.168.122.168:50095_fwd_0.zip,100,ebc4206e0bffc6c0afed94164c8ce6dd,6f8a1830f7f98b1a8de118d1ece220264878c1e9432b7b5382094958a1dfd6a9,2.88,\"Passwords/PK, Passwords/PK\",50 4b 03 04 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 01 02 14 00 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 05 06\n2026-04-29T20:37:10.411964,Tool:tmp5x9cm1vp/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmp5x9cm1vp/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-29T20:37:10.421402,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp5x9cm1vp/carved/scalpel/audit.txt,539,8b1366d2a7c06785d8855bc26ccb87c9,37b915cb5cf3b3db96fdd533793e4bad37e84ff2715aaaa2236e3200c0eaed12,5.01,\"Scalpel version 1.60 audit file, Started at Wed Apr 29 20:37:10 2026, Command line:, scalpel -c /tmp/tmp5x9cm1vp/carved/scalpel.conf /tmp/filtered_52_zp8bi.pcap -o /tmp/tmp5x9cm1vp/carved/scalpel , Output directory: /tmp/tmp5x9cm1vp/carved/scalpel, Configuration file: /tmp/tmp5x9cm1vp/carved/scalpel.conf, Opening target , /tmp/filtered_52_zp8bi.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, 00000000.zip         7354, YES               0, filtered_52_zp8bi.pcap, Completed at Wed Apr 29 20:37:10 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 30 30 30 30 30 30 30 30 2e 7a 69 70 20 20 20 20 20 20 20 20 20 37 33 35 34 09 09 59 45 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 09 09 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a\n2026-04-29T20:37:10.408451,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmp5x9cm1vp/carved/foremost/audit.txt,753,90486f4927ca1afdb7477ae2a8840746,8a079fbf440a8eb080b314414e999820674b28c738aaddd000daaee52a7965a2,4.92,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Wed Apr 29 20:37:10 2026, Invocation: foremost -t all -i /tmp/filtered_52_zp8bi.pcap -o /tmp/tmp5x9cm1vp/carved/foremost , Output directory: /tmp/tmp5x9cm1vp/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_52_zp8bi.pcap, Start: Wed Apr 29 20:37:10 2026, Length: 23 KB (23704 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , 00000014.zip ,       118 B ,        7258 , Finish: Wed Apr 29 20:37:10 2026, 1 FILES EXTRACTED, zip:, ------------------------------------------------------------------, Foremost finished at Wed Apr 29 20:37:10 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 35 78 39 63 6d 31 76 70 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 35 32 5f 7a 70 38 62 69 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 32 33 20 4b 42 20 28 32 33 37 30 34 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 30 3a 09 30 30 30 30 30 30 31 34 2e 7a 69 70 20 09 20 20 20 20 20 20 31 31 38 20 42 20 09 20 20 20 20 20 20 20 37 32 35 38 20 09 20 0a 46 69 6e 69 73 68 3a 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a 0a 31 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 7a 69 70 3a 3d 20 31 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 57 65 64 20 41 70 72 20 32 39 20 32 30 3a 33 37 3a 31 30 20 32 30 32 36 0a\n2026-04-29T20:37:10.408451,Tool:foremost/zip,Unknown,0,Unknown,0,HTTP,00000014.zip,zip,/tmp/tmp5x9cm1vp/carved/foremost/zip/00000014.zip,118,1a71a90f9676149095cdeac5feabfab4,c60b06711def2f8463b33da332704a94f04c7b0e5a76a9780b6bea8ff86519b6,2.77,\"Passwords/PK, Passwords/PK\",50 4b 03 04 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 01 02 14 00 14 00 00 00 00 00 0b 16 89 5c 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 61 73 73 77 6f 72 64 73 2f 50 4b 05 06 00 00 00 00 01 00 01 00 38 00 00 00 28 00 00 00 00 00\n2026-04-29T20:37:10.421402,Tool:scalpel/zip-6-0,Unknown,0,Unknown,0,HTTP,00000000.zip,zip,/tmp/tmp5x9cm1vp/carved/scalpel/zip-6-0/00000000.zip,0,d41d8cd98f00b204e9800998ecf8427e,e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855,0.00,,\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,198,16867,100.00%,100.00%\n","network_analysis_http_graph.csv":"Timestamp,Stream ID,Source IP,Destination IP,Method,Host,URL,Referer,User-Agent\n0,5,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,7,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,9,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,11,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n0,13,192.168.122.168,208.95.112.1,GET,ip-api.com,http://ip-api.com,None,Extracted via Decryption\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n8080,115,7662,29.04%,22.71%\n80,51,4302,12.88%,12.75%\n50096,23,1507,5.81%,4.47%\n50144,23,1507,5.81%,4.47%\n50161,23,1507,5.81%,4.47%\n50176,23,1507,5.81%,4.47%\n443,18,3748,4.55%,11.11%\n50095,16,1069,4.04%,3.17%\n50062,14,1155,3.54%,3.42%\n21,14,1155,3.54%,3.42%\n50101,11,923,2.78%,2.74%\n50145,11,898,2.78%,2.66%\n50162,11,899,2.78%,2.66%\n50177,11,899,2.78%,2.66%\n49899,9,1278,2.27%,3.79%\n49892,9,2470,2.27%,7.32%\n50180,7,565,1.77%,1.67%\n50181,7,683,1.77%,2.02%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-29 14:28:58.193546,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8); [TSHARK-OBJECT] %3ffields=countryCode; [TSHARK-OBJECT] %3ffields=countryCode(2); [TSHARK-OBJECT] %3ffields=countryCode(3); [TSHARK-OBJECT] %3ffields=countryCode(4); [TSHARK-OBJECT] object44; [TSHARK-OBJECT] %3ffields=countryCode(1),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:28:58.521026,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:28:59.127220,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:00.331285,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:00.543456,5,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59584, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:00.836897,6,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:01.446243,7,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:01.539992,8,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb704000080062953c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)S..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46852, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10579, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:02.650424,9,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46853, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10429, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:02.744187,10,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70640008006e950c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....P..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59728, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:03.853568,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ......(...z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46855, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10427, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:05.054065,12,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb792080045000120b70840008006e8b9c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b28000017030300f30000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf054bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f686c0c53a57ae7725ee85af8450a9656201fe37c8becf019f5a717fdced5325dcbf0647c16ff4231009f316895d38239c90c40d298f461ab61c30c98bf602b25ede2297265a953bc66b932e37efe45c7f7d091de46099e7c1c56580552a13c8c84e7adf356e7fb0aac6fb739d5c579e9c49755ec8f2ad349a1cda08b5ca25bc47a43dbb3a73a8cfcb35e06859b1fd7823bc058482b6d1324b26ba3193ecf5dd5c8557e5fc14703cc0b15f6e1a446bea,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:05.147772,13,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70940008006e94dc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E....\t@....M..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59725, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:07.462651,14,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. .\n@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:10.040923,15,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70b40008006e94bc0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....K..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59723, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:12.348924,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.. ..@.......z.............Q...P...[(..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....:W.w%....P.eb..7.....Zq...S%...G.o.#.\t...]8#...\n).F...0.....^.\"\".&Z.;.k..7..\\.}\t..`....e.U*...Nz.5n.....s.\\W..Iu^...4......%.G.=.:s...5.hY..x#......2K&.1....\\.W...p<.._n.Dk.\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 288, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59573, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23336, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 243, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf0T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\xc0\\\\xc5:W\\\\xaew%\\\\xee\\\\x85\\\\xaf\\\\x84P\\\\xa9eb\\\\x01\\\\xfe7\\\\xc8\\\\xbe\\\\xcf\\\\x01\\\\x9fZq\\\\x7f\\\\xdc\\\\xedS%\\\\xdc\\\\xbf\\\\x06G\\\\xc1o\\\\xf4#\\\\x10\\\\t\\\\xf3\\\\x16\\\\x89]8#\\\\x9c\\\\x90\\\\xc4\\\\r)\\\\x8fF\\\\x1a\\\\xb6\\\\x1c0\\\\xc9\\\\x8b\\\\xf6\\\\x02\\\\xb2^\\\\xde\\\"\"\\\\x97&Z\\\\x95;\\\\xc6k\\\\x93.7\\\\xef\\\\xe4\\\\\\\\\\\\x7f}\\\\t\\\\x1d\\\\xe4`\\\\x99\\\\xe7\\\\xc1\\\\xc5e\\\\x80U*\\\\x13\\\\xc8\\\\xc8Nz\\\\xdf5n\\\\x7f\\\\xb0\\\\xaa\\\\xc6\\\\xfbs\\\\x9d\\\\\\\\W\\\\x9e\\\\x9cIu^\\\\xc8\\\\xf2\\\\xad4\\\\x9a\\\\x1c\\\\xda\\\\x08\\\\xb5\\\\xca%\\\\xbcG\\\\xa4=\\\\xbb:s\\\\xa8\\\\xcf\\\\xcb5\\\\xe0hY\\\\xb1\\\\xfdx#\\\\xbc\\\\x05\\\\x84\\\\x82\\\\xb6\\\\xd12K&\\\\xba1\\\\x93\\\\xec\\\\xf5\\\\xdd\\\\\\\\\\\\x85W\\\\xe5\\\\xfc\\\\x14p<\\\\xc0\\\\xb1_n\\\\x1aDk\\\\xea' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 14:29:15.473425,17,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,S,,,Ether > IP > TCP,3,TCP S Seq=941849431 Ack=0,525400577f945254007bb792080045000034034f4000800651f6c0a87aa82e693bc5c38e001538237b57000000008002faf0a5a50000020405b40103030801010402,RT.W..RT.{....E..4.O@...Q...z..i;.....8#{W........................,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20982, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849431, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 42405, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:15.473469,18,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1324414932 Ack=941849432,5254007bb792525400577f9408004500003400004000400695452e693bc5c0a87aa80015c38e4ef0f7d438237b588012a564a5a50000020405b40101040201030309,RT.{..RT.W....E..4..@.@..E.i;...z.....N...8#{X...d...............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38213, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324414932, \"\"ack\"\": 941849432, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 42405, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:15.490651,19,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=941849432 Ack=1324414933,525400577f945254007bb7920800450000280350400080065201c0a87aa82e693bc5c38e001538237b584ef0f7d550100402a5990000,RT.W..RT.{....E..(.P@...R...z..i;.....8#{XN...P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 848, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20993, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849432, \"\"ack\"\": 1324414933, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:15.823269,20,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1324414933 Ack=941849432,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,\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\n220-You are user number 1 of 50 allowed.\n220-Local time is now 14:29. Server port: 21.\n220-IPv6 connections are also welcome on this server.\n220 You will be disconnected after 15 minutes of inactivity.\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 309, \"\"id\"\": 61378, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42113, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324414933, \"\"ack\"\": 941849432, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42662, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 14:29. Server port: 21.\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"\"}}]\"\n2026-04-29 14:29:15.876067,21,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=941849432 Ack=1324415202,525400577f945254007bb79208004500003803514000800651f0c0a87aa82e693bc5c38e001538237b584ef0f8e250180401a5a90000555345522061646d696e5f73796e0d0a,\"USER admin_syn\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 56, \"\"id\"\": 849, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20976, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849432, \"\"ack\"\": 1324415202, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42409, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"USER admin_syn\\r\\n\"\"}}]\"\n2026-04-29 14:29:15.876088,22,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1324415202 Ack=941849448,5254007bb792525400577f94080045000028efc340004006a58d2e693bc5c0a87aa80015c38e4ef0f8e238237b6850100053a5990000,RT.{..RT.W....E..(..@.@....i;...z.....N...8#{hP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61379, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42381, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415202, \"\"ack\"\": 941849448, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:16.221838,23,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1324415202 Ack=941849448,5254007bb792525400577f94080045000052efc440004006a5622e693bc5c0a87aa80015c38e4ef0f8e238237b6850180053a5c3000033333120557365722061646d696e5f73796e204f4b2e2050617373776f72642072657175697265640d0a,\"331 User admin_syn OK. Password required\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 82, \"\"id\"\": 61380, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42338, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415202, \"\"ack\"\": 941849448, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42435, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"331 User admin_syn OK. Password required\\r\\n\"\"}}]\"\n2026-04-29 14:29:16.258995,24,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=941849448 Ack=1324415244,525400577f945254007bb79208004500003703524000800651f0c0a87aa82e693bc5c38e001538237b684ef0f90c50180401a5a800005041535320426c61636b3930300d0a,\"PASS Black900\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 55, \"\"id\"\": 850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20976, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849448, \"\"ack\"\": 1324415244, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42408, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"PASS Black900\\r\\n\"\"}}]\"\n2026-04-29 14:29:16.259015,25,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1324415244 Ack=941849463,5254007bb792525400577f94080045000028efc540004006a58b2e693bc5c0a87aa80015c38e4ef0f90c38237b7750100053a5990000,RT.{..RT.W....E..(..@.@....i;...z.....N...8#{wP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61381, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42379, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415244, \"\"ack\"\": 941849463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:19.736234,26,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70d40008006e9acc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46861, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:21.418313,27,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > Raw,4,TCP PA Seq=1324415244 Ack=941849463,5254007bb792525400577f94080045000049efc640004006a5692e693bc5c0a87aa80015c38e4ef0f90c38237b7750180053a5ba0000353330204c6f67696e2061757468656e7469636174696f6e206661696c65640d0a,\"530 Login authentication failed\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 73, \"\"id\"\": 61382, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42345, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415244, \"\"ack\"\": 941849463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42426, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"530 Login authentication failed\\r\\n\"\"}}]\"\n2026-04-29 14:29:21.533084,28,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=941849463 Ack=1324415277,525400577f945254007bb79208004500002803534000800651fec0a87aa82e693bc5c38e001538237b774ef0f92d50100401a5990000,RT.W..RT.{....E..(.S@...Q...z..i;.....8#{wN..-P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20990, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849463, \"\"ack\"\": 1324415277, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:22.033117,29,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411405 Ack=1369756557,525400577f945254007bb792080045000028b70e40008006e9abc0a87aa804d519f0c2e401bbc6bf148d51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46862, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411405, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:29.755815,30,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,FA,,,Ether > IP > TCP,3,TCP FA Seq=941849463 Ack=1324415277,525400577f945254007bb79208004500002803544000800651fdc0a87aa82e693bc5c38e001538237b774ef0f92d50110401a5990000,RT.W..RT.{....E..(.T@...Q...z..i;.....8#{wN..-P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20989, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849463, \"\"ack\"\": 1324415277, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:29.755913,31,TCP 46.105.59.197:21 -> 192.168.122.168:50062,46.105.59.197,192.168.122.168,21,50062,TCP,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1324415277 Ack=941849464,5254007bb792525400577f94080045000028efc740004006a5892e693bc5c0a87aa80015c38e4ef0f92d38237b7850110053a5990000,RT.{..RT.W....E..(..@.@....i;...z.....N..-8#{xP..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 61383, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 42377, \"\"src\"\": \"\"46.105.59.197\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 21, \"\"dport\"\": 50062, \"\"seq\"\": 1324415277, \"\"ack\"\": 941849464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:29.756012,32,TCP 192.168.122.168:50062 -> 46.105.59.197:21,192.168.122.168,46.105.59.197,50062,21,TCP,Internal,Private Network,,,,,,France,Unknown,16276,OVH SAS,48.8582,2.3387,46.105.58.0/23,A,,,Ether > IP > TCP,3,TCP A Seq=941849464 Ack=1324415278,525400577f945254007bb79208004500002803554000800651fcc0a87aa82e693bc5c38e001538237b784ef0f92e50100401a5990000,RT.W..RT.{....E..(.U@...Q...z..i;.....8#{xN...P.......,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 20988, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"46.105.59.197\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50062, \"\"dport\"\": 21, \"\"seq\"\": 941849464, \"\"ack\"\": 1324415278, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 42393, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.359526,33,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=689988170 Ack=0,525400577f945254007bb792080045000034961540008006a35cc0a87aa8b9a3cc5dc3af1f902920624a000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4..@....\\..z....]....) bJ.........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38421, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41820, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988170, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:43.359579,34,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1770832333 Ack=689988171,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3af698cc1cd2920624b8012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z.....i...) bK...d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832333, \"\"ack\"\": 689988171, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:43.359713,35,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=689988171 Ack=1770832334,525400577f945254007bb792080045000028961640008006a367c0a87aa8b9a3cc5dc3af1f902920624b698cc1ce50108000c16c0000,RT.W..RT.{....E..(..@....g..z....]....) bKi...P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38422, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41831, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988171, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441289,36,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988171 Ack=1770832334,525400577f945254007bb79208004500002c961740008006a362c0a87aa8b9a3cc5dc3af1f902920624b698cc1ce50188000c1700000feffffff,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38423, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41826, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988171, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"feffffff\"\"}}]\"\n2026-04-29 14:29:43.441320,37,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988175,5254007bb792525400577f940800450000284777400040063207b9a3cc5dc0a87aa81f90c3af698cc1ce2920624f50100053c16c0000,RT.{..RT.W....E..(Gw@.@.2....]..z.....i...) bOP..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18295, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12807, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988175, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441456,38,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988175 Ack=1770832334,525400577f945254007bb79208004500002c961840008006a361c0a87aa8b9a3cc5dc3af1f902920624f698cc1ce50188000c17000002f000000,/\u0000\u0000\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38424, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41825, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988175, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"/\\u0000\\u0000\\u0000\"\"}}]\"\n2026-04-29 14:29:43.441469,39,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988179,5254007bb792525400577f940800450000284778400040063206b9a3cc5dc0a87aa81f90c3af698cc1ce2920625350100053c16c0000,RT.{..RT.W....E..(Gx@.@.2....]..z.....i...) bSP..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18296, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12806, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988179, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441592,40,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988179 Ack=1770832334,525400577f945254007bb792080045000057961940008006a335c0a87aa8b9a3cc5dc3af1f9029206253698cc1ce50188000c19b000043726564656e7469616c735f4445534b544f502d4a4c4355504b305f32303236303430395f3032343832362e7a6970,Credentials_DESKTOP-JLCUPK0_20260409_024826.zip,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 87, \"\"id\"\": 38425, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988179, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49563, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"Credentials_DESKTOP-JLCUPK0_20260409_024826.zip\"\"}}]\"\n2026-04-29 14:29:43.441600,41,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988226,5254007bb792525400577f940800450000284779400040063205b9a3cc5dc0a87aa81f90c3af698cc1ce2920628250100053c16c0000,RT.{..RT.W....E..(Gy@.@.2....]..z.....i...) b.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18297, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12805, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988226, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441691,42,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988226 Ack=1770832334,525400577f945254007bb792080045000030961a40008006a35bc0a87aa8b9a3cc5dc3af1f9029206282698cc1ce50188000c17400007600000000000000,v\u0000\u0000\u0000\u0000\u0000\u0000\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 48, \"\"id\"\": 38426, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41819, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988226, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49524, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"v\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\\u0000\"\"}}]\"\n2026-04-29 14:29:43.441697,43,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988234,5254007bb792525400577f94080045000028477a400040063204b9a3cc5dc0a87aa81f90c3af698cc1ce2920628a50100053c16c0000,RT.{..RT.W....E..(Gz@.@.2....]..z.....i...) b.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18298, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12804, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988234, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.441783,44,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=689988234 Ack=1770832334,525400577f945254007bb79208004500009e961b40008006a2ecc0a87aa8b9a3cc5dc3af1f902920628a698cc1ce50188000c1e20000504b03041400000000000b16895c0000000000000000000000000a00000050617373776f7264732f504b010214001400000000000b16895c0000000000000000000000000a000000000000000000000000000000000050617373776f7264732f504b0506000000000100010038000000280000000000,\"PK...........\\............\n...Passwords/PK.............\\............\n.................Passwords/PK..........8...(.....\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 158, \"\"id\"\": 38427, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41708, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988234, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49634, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"504b03041400000000000b16895c0000000000000000000000000a00000050617373776f7264732f504b010214001400000000000b16895c0000000000000000000000000a000000000000000000000000000000000050617373776f7264732f504b0506000000000100010038000000280000000000\"\"}}]\"\n2026-04-29 14:29:43.441790,45,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1770832334 Ack=689988352,5254007bb792525400577f94080045000028477b400040063203b9a3cc5dc0a87aa81f90c3af698cc1ce2920630050100053c16c0000,RT.{..RT.W....E..(G{@.@.2....]..z.....i...) c.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18299, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12803, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988352, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.450926,46,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=689988352 Ack=1770832334,525400577f945254007bb792080045000028961c40008006a361c0a87aa8b9a3cc5dc3af1f9029206300698cc1ce50118000c16c0000,RT.W..RT.{....E..(..@....a..z....]....) c.i...P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38428, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41825, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988352, \"\"ack\"\": 1770832334, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.451014,47,TCP 185.163.204.93:8080 -> 192.168.122.168:50095,185.163.204.93,192.168.122.168,8080,50095,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1770832334 Ack=689988353,5254007bb792525400577f94080045000028477c400040063202b9a3cc5dc0a87aa81f90c3af698cc1ce2920630150110053c16c0000,RT.{..RT.W....E..(G|@.@.2....]..z.....i...) c.P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 18300, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 12802, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50095, \"\"seq\"\": 1770832334, \"\"ack\"\": 689988353, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.451337,48,TCP 192.168.122.168:50095 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50095,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=689988353 Ack=1770832335,525400577f945254007bb792080045000028961d40008006a360c0a87aa8b9a3cc5dc3af1f9029206301698cc1cf50108000c16c0000,RT.W..RT.{....E..(..@....`..z....]....) c.i...P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38429, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41824, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50095, \"\"dport\"\": 8080, \"\"seq\"\": 689988353, \"\"ack\"\": 1770832335, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:43.475864,49,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1897488114 Ack=0,525400577f945254007bb792080045000034961e40008006a353c0a87aa8b9a3cc5dc3b01f9071195ef2000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4..@....S..z....]....q.^..........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38430, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41811, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488114, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:43.475909,50,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=747942179 Ack=1897488115,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3b02c94b12371195ef38012a564c1780000020405b40101040201030309,\"RT.{..RT.W....E..4..@.@.yr...]..z.....,..#q.^....d.x.............\t\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942179, \"\"ack\"\": 1897488115, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:43.476007,51,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1897488115 Ack=747942180,525400577f945254007bb792080045000028961f40008006a35ec0a87aa8b9a3cc5dc3b01f9071195ef32c94b12450108000c16c0000,\"RT.W..RT.{....E..(..@....^..z....]....q.^.,..$P....l..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38431, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41822, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488115, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:46.434403,52,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=416520094 Ack=0,525400577f945254007bb79208004500003406dd400080067835c0a87aa8d05f7001c3b5005018d3979e000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x5..z.._p....P............{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1757, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30773, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520094, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:29:46.434474,53,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2612282429 Ack=416520095,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c3b59bb4443d18d3979f8012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P....D=.......d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282429, \"\"ack\"\": 416520095, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:29:46.434692,54,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=416520095 Ack=2612282430,525400577f945254007bb79208004500002806de400080067840c0a87aa8d05f7001c3b5005018d3979f9bb4443e501020147bcc0000,RT.W..RT.{....E..(..@...x@..z.._p....P......D>P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1758, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30784, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520095, \"\"ack\"\": 2612282430, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:46.439405,55,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500009506df4000800677d2c0a87aa8d05f7001c3b5005018d3979f9bb4443e501820147c390000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a,\"RT.W..RT.{....E.....@...w...z.._p....P......D>P. .|9..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\nConnection: Keep-Alive\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 149, \"\"id\"\": 1759, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30674, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520095, \"\"ack\"\": 2612282430, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31801, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": \"\"Keep-Alive\"\", \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:29:46.439427,56,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2612282430 Ack=416520204,5254007bb792525400577f940800450000282ced400040069231d05f7001c0a87aa80050c3b59bb4443e18d3980c501000537bcc0000,\"RT.{..RT.W....E..(,.@.@..1._p...z..P....D>....P..S{...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11501, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37425, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282430, \"\"ack\"\": 416520204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:46.967336,57,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 11502, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37228, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282430, \"\"ack\"\": 416520204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:29:46 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'38', b'X-Rl': b'43'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:29:47.011083,58,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=416520204 Ack=2612282626,525400577f945254007bb79208004500002806e040008006783ec0a87aa8d05f7001c3b5005018d3980c9bb44502501020137bcc0000,RT.W..RT.{....E..(..@...x>..z.._p....P......E.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1760, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30782, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520204, \"\"ack\"\": 2612282626, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:47.026153,59,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1897488115 Ack=747942180,525400577f945254007bb79208004500002c962040008006a359c0a87aa8b9a3cc5dc3b01f9071195ef32c94b12450188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38432, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41817, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488115, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:29:47.026196,60,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488119,5254007bb792525400577f94080045000028975840004006e225b9a3cc5dc0a87aa81f90c3b02c94b12471195ef750100053c16c0000,\"RT.{..RT.W....E..(.X@.@..%...]..z.....,..$q.^.P..S.l..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38744, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57893, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488119, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:47.026278,61,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1897488119 Ack=747942180,525400577f945254007bb7920800450000c7962140008006a2bdc0a87aa8b9a3cc5dc3b01f9071195ef72c94b12450188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38433, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41661, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488119, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:29:47.026286,62,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000028975940004006e224b9a3cc5dc0a87aa81f90c3b02c94b12471195f9650100053c16c0000,\"RT.{..RT.W....E..(.Y@.@..$...]..z.....,..$q._.P..S.l..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38745, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57892, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:29:57.101824,63,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962240008006a35ac0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38434, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41818, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:29:57.101853,64,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975a40004006e217b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.Z@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38746, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57879, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:07.116476,65,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962340008006a359c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38435, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41817, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:07.116552,66,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975b40004006e216b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.[@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38747, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57878, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:17.145904,67,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962440008006a358c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38436, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41816, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:17.145962,68,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975c40004006e215b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.\\@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38748, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57877, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:21.344763,69,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2612282626 Ack=416520204,5254007bb792525400577f940800450000282cef40004006922fd05f7001c0a87aa80050c3b59bb4450218d3980c501100537bcc0000,\"RT.{..RT.W....E..(,.@.@../._p...z..P....E.....P..S{...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 11503, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37423, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282626, \"\"ack\"\": 416520204, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:21.344924,70,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=416520204 Ack=2612282627,525400577f945254007bb79208004500002806e140008006783dc0a87aa8d05f7001c3b5005018d3980c9bb44503501020137bcc0000,RT.W..RT.{....E..(..@...x=..z.._p....P......E.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1761, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520204, \"\"ack\"\": 2612282627, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:27.321735,71,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962540008006a357c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38437, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41815, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:27.321770,72,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975d40004006e214b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.]@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38749, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57876, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:37.335287,73,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962640008006a356c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38438, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41814, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:37.335338,74,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975e40004006e213b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4.^@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38750, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57875, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:47.430411,75,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1897488277 Ack=747942180,525400577f945254007bb792080045000029962740008006a355c0a87aa8b9a3cc5dc3b01f9071195f952c94b12450108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38439, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41813, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488277, \"\"ack\"\": 747942180, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:30:47.430447,76,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000034975f40004006e212b9a3cc5dc0a87aa81f90c3b02c94b12471195f9680100053c17800000101050a71195f9571195f96,\"RT.{..RT.W....E..4._@.@......]..z.....,..$q._....S.x.....\nq._.q._.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38751, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57874, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1897488277, 1897488278))]\"\"}}]\"\n2026-04-29 14:30:53.002744,77,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=747942180 Ack=1897488278,5254007bb792525400577f94080045000028976040004006e21db9a3cc5dc0a87aa81f90c3b02c94b12471195f9650110053c16c0000,\"RT.{..RT.W....E..(.`@.@......]..z.....,..$q._.P..S.l..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38752, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 57885, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942180, \"\"ack\"\": 1897488278, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.002993,78,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1897488278 Ack=747942181,525400577f945254007bb792080045000028962840008006a355c0a87aa8b9a3cc5dc3b01f9071195f962c94b12550108000c16c0000,\"RT.W..RT.{....E..(.(@....U..z....]....q._.,..%P....l..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38440, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41813, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488278, \"\"ack\"\": 747942181, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.053412,79,TCP 192.168.122.168:50096 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50096,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=1897488278 Ack=747942181,525400577f945254007bb792080045000028962940008006a354c0a87aa8b9a3cc5dc3b01f9071195f962c94b12550118000c16c0000,\"RT.W..RT.{....E..(.)@....T..z....]....q._.,..%P....l..\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38441, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41812, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50096, \"\"dport\"\": 8080, \"\"seq\"\": 1897488278, \"\"ack\"\": 747942181, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.053462,80,TCP 185.163.204.93:8080 -> 192.168.122.168:50096,185.163.204.93,192.168.122.168,8080,50096,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=747942181 Ack=1897488279,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c3b02c94b12571195f97501000535c840000,\"RT.{..RT.W....E..(..@.@.y~...]..z.....,..%q._.P..S\\...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50096, \"\"seq\"\": 747942181, \"\"ack\"\": 1897488279, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 23684, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.071634,81,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1125558933 Ack=0,525400577f945254007bb792080045000034962a40008006a347c0a87aa8b9a3cc5dc3e01f904316aa95000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.*@....G..z....]....C............x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38442, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41799, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558933, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:30:53.071706,82,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2135233061 Ack=1125558934,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3e07f4512254316aa968012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z......E.%C......d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233061, \"\"ack\"\": 1125558934, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:30:53.071813,83,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1125558934 Ack=2135233062,525400577f945254007bb792080045000028962b40008006a352c0a87aa8b9a3cc5dc3e01f904316aa967f45122650108000c16c0000,RT.W..RT.{....E..(.+@....R..z....]....C....E.&P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38443, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41810, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558934, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.638620,84,TCP 192.168.122.168:50101 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50101,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=416520204 Ack=2612282627,525400577f945254007bb79208004500002806e240008006783cc0a87aa8d05f7001c3b5005018d3980c9bb44503501120137bcc0000,RT.W..RT.{....E..(..@...x<..z.._p....P......E.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1762, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30780, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50101, \"\"dport\"\": 80, \"\"seq\"\": 416520204, \"\"ack\"\": 2612282627, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.638683,85,TCP 208.95.112.1:80 -> 192.168.122.168:50101,208.95.112.1,192.168.122.168,80,50101,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2612282627 Ack=416520205,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c3b59bb4450318d3980d50100053de310000,\"RT.{..RT.W....E..(..@.@...._p...z..P....E....\nP..S.1..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50101, \"\"seq\"\": 2612282627, \"\"ack\"\": 416520205, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 56881, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.640511,86,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=1823256111 Ack=0,525400577f945254007bb79208004500003406e340008006782fc0a87aa8d05f7001c3e100506cacae2f000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x/..z.._p....Pl../........{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1763, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30767, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256111, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:30:53.640570,87,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3425078172 Ack=1823256112,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c3e1cc268b9c6cacae308012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...&..l..0...d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078172, \"\"ack\"\": 1823256112, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:30:53.640649,88,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=1823256112 Ack=3425078173,525400577f945254007bb79208004500002806e440008006783ac0a87aa8d05f7001c3e100506cacae30cc268b9d501004027bcc0000,RT.W..RT.{....E..(..@...x:..z.._p....Pl..0.&..P...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1764, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30778, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256112, \"\"ack\"\": 3425078173, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1026, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.641256,89,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06e54000800677e4c0a87aa8d05f7001c3e100506cacae30cc268b9d501804027c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....Pl..0.&..P...|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1765, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30692, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256112, \"\"ack\"\": 3425078173, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1026, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:30:53.641276,90,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3425078173 Ack=1823256197,5254007bb792525400577f94080045000028daef40004006e42ed05f7001c0a87aa80050c3e1cc268b9d6cacae85501000537bcc0000,RT.{..RT.W....E..(..@.@...._p...z..P...&..l...P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56047, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58414, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078173, \"\"ack\"\": 1823256197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.992047,91,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f940800450000ebdaf040004006e36ad05f7001c0a87aa80050c3e1cc268b9d6cacae85501800537c8f0000485454502f312e3120323030204f4b0d0a446174653a205765642c2032392041707220323032362031343a33303a353320474d540d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e3b20636861727365743d7574662d380d0a436f6e74656e742d4c656e6774683a2032300d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a582d54746c3a20300d0a582d526c3a2034300d0a0d0a7b22636f756e747279436f6465223a224e4c227d,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 235, \"\"id\"\": 56048, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58218, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078173, \"\"ack\"\": 1823256197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31887, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:30:53 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'0', b'X-Rl': b'40'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:30:53.994523,92,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1125558934 Ack=2135233062,525400577f945254007bb79208004500002c962c40008006a34dc0a87aa8b9a3cc5dc3e01f904316aa967f45122650188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38444, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558934, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:30:53.994591,93,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125558938,5254007bb792525400577f94080045000028a95e40004006d01fb9a3cc5dc0a87aa81f90c3e07f4512264316aa9a50100053c16c0000,RT.{..RT.W....E..(.^@.@......]..z......E.&C...P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43358, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53279, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125558938, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:53.994689,94,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1125558938 Ack=2135233062,525400577f945254007bb7920800450000c7962d40008006a2b1c0a87aa8b9a3cc5dc3e01f904316aa9a7f45122650188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38445, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41649, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125558938, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:30:53.994701,95,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000028a95f40004006d01eb9a3cc5dc0a87aa81f90c3e07f4512264316ab3950100053c16c0000,RT.{..RT.W....E..(._@.@......]..z......E.&C..9P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43359, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53278, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:30:54.034127,96,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=1823256197 Ack=3425078368,525400577f945254007bb79208004500002806e6400080067838c0a87aa8d05f7001c3e100506cacae85cc268c60501004017bcc0000,RT.W..RT.{....E..(..@...x8..z.._p....Pl....&.`P...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1766, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30776, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256197, \"\"ack\"\": 3425078368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:04.002795,97,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029962e40008006a34ec0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38446, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41806, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:04.002844,98,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96040004006d011b9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.`@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43360, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53265, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:14.092766,99,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029962f40008006a34dc0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38447, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41805, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:14.092810,100,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96140004006d010b9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.a@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43361, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53264, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:24.094630,101,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963040008006a34cc0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38448, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41804, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:24.094691,102,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96240004006d00fb9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.b@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43362, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53263, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:34.185255,103,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963140008006a34bc0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38449, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41803, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:34.185298,104,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96340004006d00eb9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.c@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43363, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53262, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:44.197089,105,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963240008006a34ac0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38450, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41802, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:44.197120,106,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96440004006d00db9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.d@.@..\n...]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43364, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53261, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:47.033002,107,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3425078368 Ack=1823256197,5254007bb792525400577f94080045000028daf140004006e42cd05f7001c0a87aa80050c3e1cc268c606cacae85501100537bcc0000,\"RT.{..RT.W....E..(..@.@..,._p...z..P...&.`l...P..S{...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 56049, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 58412, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078368, \"\"ack\"\": 1823256197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:47.033208,108,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=1823256197 Ack=3425078369,525400577f945254007bb79208004500002806e7400080067837c0a87aa8d05f7001c3e100506cacae85cc268c61501004017bcc0000,RT.W..RT.{....E..(..@...x7..z.._p....Pl....&.aP...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1767, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30775, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256197, \"\"ack\"\": 3425078369, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 1025, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:54.292149,109,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=1125559096 Ack=2135233062,525400577f945254007bb792080045000029963340008006a349c0a87aa8b9a3cc5dc3e01f904316ab387f45122650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38451, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559096, \"\"ack\"\": 2135233062, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:31:54.292182,110,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000034a96540004006d00cb9a3cc5dc0a87aa81f90c3e07f4512264316ab3980100053c17800000101050a4316ab384316ab39,\"RT.{..RT.W....E..4.e@.@......]..z......E.&C..9...S.x.....\nC..8C..9\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 43365, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53260, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (1125559096, 1125559097))]\"\"}}]\"\n2026-04-29 14:31:58.084023,111,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2135233062 Ack=1125559097,5254007bb792525400577f94080045000028a96640004006d017b9a3cc5dc0a87aa81f90c3e07f4512264316ab3950110053c16c0000,RT.{..RT.W....E..(.f@.@......]..z......E.&C..9P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 43366, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 53271, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233062, \"\"ack\"\": 1125559097, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.084240,112,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1125559097 Ack=2135233063,525400577f945254007bb792080045000028963440008006a349c0a87aa8b9a3cc5dc3e01f904316ab397f45122750108000c16c0000,RT.W..RT.{....E..(.4@....I..z....]....C..9.E.'P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38452, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41801, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559097, \"\"ack\"\": 2135233063, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.140543,113,TCP 192.168.122.168:50144 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50144,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=1125559097 Ack=2135233063,525400577f945254007bb792080045000028963540008006a348c0a87aa8b9a3cc5dc3e01f904316ab397f45122750118000c16c0000,RT.W..RT.{....E..(.5@....H..z....]....C..9.E.'P....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38453, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41800, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50144, \"\"dport\"\": 8080, \"\"seq\"\": 1125559097, \"\"ack\"\": 2135233063, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.140578,114,TCP 185.163.204.93:8080 -> 192.168.122.168:50144,185.163.204.93,192.168.122.168,8080,50144,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2135233063 Ack=1125559098,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c3e07f4512274316ab3a501000538b010000,RT.{..RT.W....E..(..@.@.y~...]..z......E.'C..:P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50144, \"\"seq\"\": 2135233063, \"\"ack\"\": 1125559098, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 35585, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.167541,115,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=2775483791 Ack=0,525400577f945254007bb792080045000034963640008006a33bc0a87aa8b9a3cc5dc3f11f90a56e858f000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.6@....;..z....].....n...........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38454, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41787, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483791, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:31:58.167587,116,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=199973462 Ack=2775483792,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c3f10beb5a56a56e85908012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z.......ZV.n.....d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973462, \"\"ack\"\": 2775483792, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:31:58.167700,117,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2775483792 Ack=199973463,525400577f945254007bb792080045000028963740008006a346c0a87aa8b9a3cc5dc3f11f90a56e85900beb5a5750108000c16c0000,RT.W..RT.{....E..(.7@....F..z....].....n....ZWP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38455, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41798, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483792, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.401279,118,TCP 192.168.122.168:50145 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50145,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=1823256197 Ack=3425078369,525400577f945254007bb79208004500002806e8400080067836c0a87aa8d05f7001c3e100506cacae85cc268c61501104017bcc0000,RT.W..RT.{....E..(..@...x6..z.._p....Pl....&.aP...{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1768, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30774, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50145, \"\"dport\"\": 80, \"\"seq\"\": 1823256197, \"\"ack\"\": 3425078369, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 1025, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.401311,119,TCP 208.95.112.1:80 -> 192.168.122.168:50145,208.95.112.1,192.168.122.168,80,50145,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3425078369 Ack=1823256198,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c3e1cc268c616cacae8650100053fbe20000,RT.{..RT.W....E..(..@.@...._p...z..P...&.al...P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50145, \"\"seq\"\": 3425078369, \"\"ack\"\": 1823256198, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 64482, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.657902,120,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=3346682245 Ack=0,525400577f945254007bb79208004500003406e9400080067829c0a87aa8d05f7001c3f20050c77a5185000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x)..z.._p....P.zQ.........{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1769, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30761, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682245, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:31:58.657953,121,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=527920616 Ack=3346682246,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c3f21f776de8c77a51868012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...wm..zQ....d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920616, \"\"ack\"\": 3346682246, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:31:58.658083,122,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3346682246 Ack=527920617,525400577f945254007bb79208004500002806ea400080067834c0a87aa8d05f7001c3f20050c77a51861f776de9501020147bcc0000,RT.W..RT.{....E..(..@...x4..z.._p....P.zQ..wm.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1770, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30772, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682246, \"\"ack\"\": 527920617, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:58.658254,123,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06eb4000800677dec0a87aa8d05f7001c3f20050c77a51861f776de9501820147c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....P.zQ..wm.P. .|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1771, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30686, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682246, \"\"ack\"\": 527920617, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:31:58.658269,124,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=527920617 Ack=3346682331,5254007bb792525400577f94080045000028d78240004006e79bd05f7001c0a87aa80050c3f21f776de9c77a51db501000537bcc0000,RT.{..RT.W....E..(..@.@...._p...z..P...wm..zQ.P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 55170, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59291, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920617, \"\"ack\"\": 3346682331, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:59.433100,125,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"countryCode\"\":\"\"US\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 55171, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59094, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920617, \"\"ack\"\": 3346682331, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:31:58 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'60', b'X-Rl': b'44'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"US\\\"\"}\"\"}}]\"\n2026-04-29 14:31:59.435064,126,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2775483792 Ack=199973463,525400577f945254007bb79208004500002c963840008006a341c0a87aa8b9a3cc5dc3f11f90a56e85900beb5a5750188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38456, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41793, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483792, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:31:59.435096,127,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483796,5254007bb792525400577f94080045000028904c40004006e931b9a3cc5dc0a87aa81f90c3f10beb5a57a56e859450100053c16c0000,RT.{..RT.W....E..(.L@.@..1...]..z.......ZW.n..P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36940, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59697, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483796, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:59.435242,128,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=2775483796 Ack=199973463,525400577f945254007bb7920800450000c7963940008006a2a5c0a87aa8b9a3cc5dc3f11f90a56e85940beb5a5750188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a225553222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"US\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38457, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41637, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483796, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"US\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:31:59.435252,129,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000028904d40004006e930b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863350100053c16c0000,RT.{..RT.W....E..(.M@.@..0...]..z.......ZW.n.3P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36941, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59696, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:31:59.523634,130,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3346682331 Ack=527920813,525400577f945254007bb79208004500002806ec400080067832c0a87aa8d05f7001c3f20050c77a51db1f776ead501020137bcc0000,RT.W..RT.{....E..(..@...x2..z.._p....P.zQ..wn.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1772, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30770, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682331, \"\"ack\"\": 527920813, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:32:09.523420,131,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963a40008006a342c0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38458, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41794, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:09.523454,132,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034904e40004006e923b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.N@.@..#...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36942, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59683, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:19.525754,133,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963b40008006a341c0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38459, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41793, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:19.525796,134,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034904f40004006e922b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.O@.@..\"\"...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36943, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59682, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:29.538419,135,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963c40008006a340c0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38460, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41792, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:29.538471,136,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905040004006e921b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.P@.@..!...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36944, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59681, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:39.542306,137,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963d40008006a33fc0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38461, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41791, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:39.542328,138,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905140004006e920b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.Q@.@.. ...]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36945, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59680, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:40.343693,139,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=527920813 Ack=3346682331,5254007bb792525400577f94080045000028d78440004006e799d05f7001c0a87aa80050c3f21f776eadc77a51db501100537bcc0000,RT.{..RT.W....E..(..@.@...._p...z..P...wn..zQ.P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 55172, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59289, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920813, \"\"ack\"\": 3346682331, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:32:40.343861,140,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3346682331 Ack=527920814,525400577f945254007bb79208004500002806ed400080067831c0a87aa8d05f7001c3f20050c77a51db1f776eae501020137bcc0000,RT.W..RT.{....E..(..@...x1..z.._p....P.zQ..wn.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1773, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30769, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682331, \"\"ack\"\": 527920814, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:32:49.556296,141,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963e40008006a33ec0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38462, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41790, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:49.556331,142,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905240004006e91fb9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.R@.@......]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36946, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59679, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:32:59.571770,143,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=2775483954 Ack=199973463,525400577f945254007bb792080045000029963f40008006a33dc0a87aa8b9a3cc5dc3f11f90a56e86320beb5a5750108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38463, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41789, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483954, \"\"ack\"\": 199973463, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:32:59.571812,144,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000034905340004006e91eb9a3cc5dc0a87aa81f90c3f10beb5a57a56e863380100053c17800000101050aa56e8632a56e8633,\"RT.{..RT.W....E..4.S@.@......]..z.......ZW.n.3...S.x.....\n.n.2.n.3\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 36947, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59678, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (2775483954, 2775483955))]\"\"}}]\"\n2026-04-29 14:33:04.163963,145,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=199973463 Ack=2775483955,5254007bb792525400577f94080045000028905440004006e929b9a3cc5dc0a87aa81f90c3f10beb5a57a56e863350110053c16c0000,RT.{..RT.W....E..(.T@.@..)...]..z.......ZW.n.3P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 36948, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 59689, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973463, \"\"ack\"\": 2775483955, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.164310,146,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=2775483955 Ack=199973464,525400577f945254007bb792080045000028964040008006a33dc0a87aa8b9a3cc5dc3f11f90a56e86330beb5a5850108000c16c0000,RT.W..RT.{....E..(.@@....=..z....].....n.3..ZXP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38464, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41789, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483955, \"\"ack\"\": 199973464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.188797,147,TCP 192.168.122.168:50161 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50161,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=2775483955 Ack=199973464,525400577f945254007bb792080045000028964140008006a33cc0a87aa8b9a3cc5dc3f11f90a56e86330beb5a5850118000c16c0000,RT.W..RT.{....E..(.A@....<..z....].....n.3..ZXP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38465, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41788, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50161, \"\"dport\"\": 8080, \"\"seq\"\": 2775483955, \"\"ack\"\": 199973464, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.188821,148,TCP 185.163.204.93:8080 -> 192.168.122.168:50161,185.163.204.93,192.168.122.168,8080,50161,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=199973464 Ack=2775483956,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c3f10beb5a58a56e86345010005378c70000,RT.{..RT.W....E..(..@.@.y~...]..z.......ZX.n.4P..Sx...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50161, \"\"seq\"\": 199973464, \"\"ack\"\": 2775483956, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 30919, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.207785,149,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=275940484 Ack=0,525400577f945254007bb792080045000034964240008006a32fc0a87aa8b9a3cc5dc4001f9010728484000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.B@..../..z....].....r...........x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38466, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41775, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940484, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:33:04.207833,150,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=1516837733 Ack=275940485,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c4005a691b65107284858012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z.....Zi.e.r.....d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837733, \"\"ack\"\": 275940485, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:33:04.207970,151,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=275940485 Ack=1516837734,525400577f945254007bb792080045000028964340008006a33ac0a87aa8b9a3cc5dc4001f90107284855a691b6650108000c16c0000,RT.W..RT.{....E..(.C@....:..z....].....r..Zi.fP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38467, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41786, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940485, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.428378,152,TCP 192.168.122.168:50162 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50162,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=3346682331 Ack=527920814,525400577f945254007bb79208004500002806ee400080067830c0a87aa8d05f7001c3f20050c77a51db1f776eae501120137bcc0000,RT.W..RT.{....E..(..@...x0..z.._p....P.zQ..wn.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1774, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30768, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50162, \"\"dport\"\": 80, \"\"seq\"\": 3346682331, \"\"ack\"\": 527920814, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.428419,153,TCP 208.95.112.1:80 -> 192.168.122.168:50162,208.95.112.1,192.168.122.168,80,50162,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=527920814 Ack=3346682332,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c3f21f776eaec77a51dc50100053c8100000,RT.{..RT.W....E..(..@.@...._p...z..P...wn..zQ.P..S....,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50162, \"\"seq\"\": 527920814, \"\"ack\"\": 3346682332, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 51216, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.429139,154,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=3658458143 Ack=0,525400577f945254007bb79208004500003406ef400080067823c0a87aa8d05f7001c4010050da0fa41f000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x#..z.._p....P............{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1775, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30755, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458143, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:33:04.429178,155,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=2184589067 Ack=3658458144,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c40182362f0bda0fa4208012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...6/.... ...d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589067, \"\"ack\"\": 3658458144, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:33:04.429258,156,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3658458144 Ack=2184589068,525400577f945254007bb79208004500002806f040008006782ec0a87aa8d05f7001c4010050da0fa42082362f0c501020147bcc0000,RT.W..RT.{....E..(..@...x...z.._p....P... .6/.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1776, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30766, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458144, \"\"ack\"\": 2184589068, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.429573,157,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06f14000800677d8c0a87aa8d05f7001c4010050da0fa42082362f0c501820147c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....P... .6/.P. .|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1777, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30680, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458144, \"\"ack\"\": 2184589068, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:33:04.429588,158,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2184589068 Ack=3658458229,5254007bb792525400577f94080045000028e67040004006d8add05f7001c0a87aa80050c40182362f0cda0fa475501000537bcc0000,RT.{..RT.W....E..(.p@.@...._p...z..P...6/....uP..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 58992, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55469, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589068, \"\"ack\"\": 3658458229, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.870210,159,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,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,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 58993, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55272, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589068, \"\"ack\"\": 3658458229, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:33:04 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'30', b'X-Rl': b'42'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:33:04.872247,160,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=275940485 Ack=1516837734,525400577f945254007bb79208004500002c964440008006a335c0a87aa8b9a3cc5dc4001f90107284855a691b6650188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38468, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940485, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:33:04.872277,161,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940489,5254007bb792525400577f94080045000028587240004006210cb9a3cc5dc0a87aa81f90c4005a691b661072848950100053c16c0000,RT.{..RT.W....E..(Xr@.@.!....]..z.....Zi.f.r..P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22642, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8460, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940489, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.872368,162,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=275940489 Ack=1516837734,525400577f945254007bb7920800450000c7964540008006a299c0a87aa8b9a3cc5dc4001f90107284895a691b6650188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38469, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41625, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940489, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:33:04.872375,163,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f94080045000028587340004006210bb9a3cc5dc0a87aa81f90c4005a691b661072852850100053c16c0000,RT.{..RT.W....E..(Xs@.@.!....]..z.....Zi.f.r.(P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22643, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8459, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:04.920066,164,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3658458229 Ack=2184589264,525400577f945254007bb79208004500002806f240008006782cc0a87aa8d05f7001c4010050da0fa47582362fd0501020137bcc0000,\"RT.W..RT.{....E..(..@...x,..z.._p....P...u.6/.P. .{...\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1778, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30764, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458229, \"\"ack\"\": 2184589264, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:14.880125,165,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964640008006a336c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38470, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41782, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:14.880161,166,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458744000400620feb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xt@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22644, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8446, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:24.882105,167,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964740008006a335c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38471, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41781, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:24.882137,168,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458754000400620fdb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xu@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22645, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8445, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:34.891823,169,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964840008006a334c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38472, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41780, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:34.891854,170,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458764000400620fcb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xv@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22646, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8444, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:44.894135,171,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964940008006a333c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38473, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41779, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:44.894165,172,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458774000400620fbb9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xw@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22647, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8443, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:54.898346,173,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964a40008006a332c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38474, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41778, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:33:54.898374,174,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458784000400620fab9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xx@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22648, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8442, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:33:58.211732,175,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=2184589264 Ack=3658458229,5254007bb792525400577f94080045000028e67240004006d8abd05f7001c0a87aa80050c40182362fd0da0fa475501100537bcc0000,RT.{..RT.W....E..(.r@.@...._p...z..P...6/....uP..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 58994, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55467, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589264, \"\"ack\"\": 3658458229, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:33:58.211946,176,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=3658458229 Ack=2184589265,525400577f945254007bb79208004500002806f340008006782bc0a87aa8d05f7001c4010050da0fa47582362fd1501020137bcc0000,RT.W..RT.{....E..(..@...x+..z.._p....P...u.6/.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1779, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30763, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458229, \"\"ack\"\": 2184589265, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:04.906947,177,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP > HTTP > Raw,5,TCP A Seq=275940647 Ack=1516837734,525400577f945254007bb792080045000029964b40008006a331c0a87aa8b9a3cc5dc4001f90107285275a691b6650108000c16d000000,\u0000,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 41, \"\"id\"\": 38475, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41777, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940647, \"\"ack\"\": 1516837734, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49517, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"\\u0000\"\"}}]\"\n2026-04-29 14:34:04.906977,178,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837734 Ack=275940648,5254007bb792525400577f9408004500003458794000400620f9b9a3cc5dc0a87aa81f90c4005a691b661072852880100053c17800000101050a1072852710728528,\"RT.{..RT.W....E..4Xy@.@. ....]..z.....Zi.f.r.(...S.x.....\n.r.'.r.(\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 22649, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8441, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('NOP', None), ('NOP', None), ('SAck', (275940647, 275940648))]\"\"}}]\"\n2026-04-29 14:34:09.251587,179,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=1516837734 Ack=275940648,5254007bb792525400577f94080045000028587a400040062104b9a3cc5dc0a87aa81f90c4005a691b661072852850110053c16c0000,RT.{..RT.W....E..(Xz@.@.!....]..z.....Zi.f.r.(P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 22650, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 8452, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837734, \"\"ack\"\": 275940648, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.251779,180,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=275940648 Ack=1516837735,525400577f945254007bb792080045000028964c40008006a331c0a87aa8b9a3cc5dc4001f90107285285a691b6750108000c16c0000,RT.W..RT.{....E..(.L@....1..z....].....r.(Zi.gP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38476, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41777, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940648, \"\"ack\"\": 1516837735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.275904,181,TCP 192.168.122.168:50176 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50176,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,FA,,,Ether > IP > TCP,3,TCP FA Seq=275940648 Ack=1516837735,525400577f945254007bb792080045000028964d40008006a330c0a87aa8b9a3cc5dc4001f90107285285a691b6750118000c16c0000,RT.W..RT.{....E..(.M@....0..z....].....r.(Zi.gP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38477, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41776, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50176, \"\"dport\"\": 8080, \"\"seq\"\": 275940648, \"\"ack\"\": 1516837735, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.275935,182,TCP 185.163.204.93:8080 -> 192.168.122.168:50176,185.163.204.93,192.168.122.168,8080,50176,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=1516837735 Ack=275940649,5254007bb792525400577f94080045000028000040004006797eb9a3cc5dc0a87aa81f90c4005a691b671072852950100053ff320000,RT.{..RT.W....E..(..@.@.y~...]..z.....Zi.g.r.)P..S.2..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31102, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50176, \"\"seq\"\": 1516837735, \"\"ack\"\": 275940649, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 65330, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.294562,183,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,S,,,Ether > IP > TCP,3,TCP S Seq=1371135995 Ack=0,525400577f945254007bb792080045000034964e40008006a323c0a87aa8b9a3cc5dc4041f9051b9dffb000000008002ffffc1780000020405b40103030701010402,RT.W..RT.{....E..4.N@....#..z....]....Q............x..............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 38478, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41763, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371135995, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 65535, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 7), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:34:09.294615,184,TCP 185.163.204.93:8080 -> 192.168.122.168:50180,185.163.204.93,192.168.122.168,8080,50180,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=17955915 Ack=1371135996,5254007bb792525400577f940800450000340000400040067972b9a3cc5dc0a87aa81f90c4040111fc4b51b9dffc8012a564c1780000020405b40101040201030309,RT.{..RT.W....E..4..@.@.yr...]..z........KQ......d.x.............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 31090, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50180, \"\"seq\"\": 17955915, \"\"ack\"\": 1371135996, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 49528, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:34:09.294761,185,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,A,,,Ether > IP > TCP,3,TCP A Seq=1371135996 Ack=17955916,525400577f945254007bb792080045000028964f40008006a32ec0a87aa8b9a3cc5dc4041f9051b9dffc0111fc4c50108000c16c0000,RT.W..RT.{....E..(.O@.......z....]....Q......LP....l..,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 38479, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41774, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371135996, \"\"ack\"\": 17955916, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.521297,186,TCP 192.168.122.168:50177 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50177,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,FA,,,Ether > IP > TCP,3,TCP FA Seq=3658458229 Ack=2184589265,525400577f945254007bb79208004500002806f440008006782ac0a87aa8d05f7001c4010050da0fa47582362fd1501120137bcc0000,RT.W..RT.{....E..(..@...x*..z.._p....P...u.6/.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1780, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30762, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50177, \"\"dport\"\": 80, \"\"seq\"\": 3658458229, \"\"ack\"\": 2184589265, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.521330,187,TCP 208.95.112.1:80 -> 192.168.122.168:50177,208.95.112.1,192.168.122.168,80,50177,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=2184589265 Ack=3658458230,5254007bb792525400577f94080045000028000040004006bf1ed05f7001c0a87aa80050c40182362fd1da0fa476501000533ef00000,RT.{..RT.W....E..(..@.@...._p...z..P...6/....vP..S>...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48926, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50177, \"\"seq\"\": 2184589265, \"\"ack\"\": 3658458230, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 16112, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.802086,188,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,S,,,Ether > IP > TCP,3,TCP S Seq=961268526 Ack=0,525400577f945254007bb79208004500003406f540008006781dc0a87aa8d05f7001c4050050394bcb2e000000008002faf07bd80000020405b40103030801010402,RT.W..RT.{....E..4..@...x...z.._p....P9K..........{...............,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 1781, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30749, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268526, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-04-29 14:34:09.802133,189,TCP 208.95.112.1:80 -> 192.168.122.168:50181,208.95.112.1,192.168.122.168,80,50181,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3563670000 Ack=961268527,5254007bb792525400577f94080045000034000040004006bf12d05f7001c0a87aa80050c405d46949f0394bcb2f8012a5647bd80000020405b40101040201030309,RT.{..RT.W....E..4..@.@...._p...z..P...iI.9K./...d{..............\t,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 48914, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50181, \"\"seq\"\": 3563670000, \"\"ack\"\": 961268527, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 42340, \"\"chksum\"\": 31704, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 9)]\"\"}}]\"\n2026-04-29 14:34:09.802235,190,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=961268527 Ack=3563670001,525400577f945254007bb79208004500002806f6400080067828c0a87aa8d05f7001c4050050394bcb2fd46949f1501020147bcc0000,RT.W..RT.{....E..(..@...x(..z.._p....P9K./.iI.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1782, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30760, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268527, \"\"ack\"\": 3563670001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:09.802516,191,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,PA,,http://ip-api.com/json/?fields=countryCode,Ether > IP > TCP > HTTP > HTTPRequest,5,HTTP Request: GET /json/?fields=countryCode,525400577f945254007bb79208004500007d06f74000800677d2c0a87aa8d05f7001c4050050394bcb2fd46949f1501820147c210000474554202f6a736f6e2f3f6669656c64733d636f756e747279436f646520485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a486f73743a2069702d6170692e636f6d0d0a0d0a,\"RT.W..RT.{....E..}..@...w...z.._p....P9K./.iI.P. .|!..GET /json/?fields=countryCode HTTP/1.1\nUser-Agent: Mozilla/5.0\nHost: ip-api.com\n\n\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 125, \"\"id\"\": 1783, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30674, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268527, \"\"ack\"\": 3563670001, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 31777, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPRequest\"\", \"\"fields\"\": {\"\"Method\"\": \"\"GET\"\", \"\"Path\"\": \"\"/json/?fields=countryCode\"\", \"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"A_IM\"\": null, \"\"Accept\"\": null, \"\"Accept_Charset\"\": null, \"\"Accept_Datetime\"\": null, \"\"Accept_Encoding\"\": null, \"\"Accept_Language\"\": null, \"\"Access_Control_Request_Headers\"\": null, \"\"Access_Control_Request_Method\"\": null, \"\"Authorization\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Length\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Type\"\": null, \"\"Cookie\"\": null, \"\"DNT\"\": null, \"\"Date\"\": null, \"\"Expect\"\": null, \"\"Forwarded\"\": null, \"\"From\"\": null, \"\"Front_End_Https\"\": null, \"\"HTTP2_Settings\"\": null, \"\"Host\"\": \"\"ip-api.com\"\", \"\"If_Match\"\": null, \"\"If_Modified_Since\"\": null, \"\"If_None_Match\"\": null, \"\"If_Range\"\": null, \"\"If_Unmodified_Since\"\": null, \"\"Keep_Alive\"\": null, \"\"Max_Forwards\"\": null, \"\"Origin\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authorization\"\": null, \"\"Proxy_Connection\"\": null, \"\"Range\"\": null, \"\"Referer\"\": null, \"\"Save_Data\"\": null, \"\"TE\"\": null, \"\"Upgrade\"\": null, \"\"Upgrade_Insecure_Requests\"\": null, \"\"User_Agent\"\": \"\"Mozilla/5.0\"\", \"\"Via\"\": null, \"\"Warning\"\": null, \"\"X_ATT_DeviceId\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Csrf_Token\"\": null, \"\"X_Forwarded_For\"\": null, \"\"X_Forwarded_Host\"\": null, \"\"X_Forwarded_Proto\"\": null, \"\"X_Http_Method_Override\"\": null, \"\"X_Request_ID\"\": null, \"\"X_Requested_With\"\": null, \"\"X_UIDH\"\": null, \"\"X_Wap_Profile\"\": null, \"\"Unknown_Headers\"\": null}}]\"\n2026-04-29 14:34:09.802533,192,TCP 208.95.112.1:80 -> 192.168.122.168:50181,208.95.112.1,192.168.122.168,80,50181,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3563670001 Ack=961268612,5254007bb792525400577f94080045000028644a400040065ad4d05f7001c0a87aa80050c405d46949f1394bcb84501000537bcc0000,RT.{..RT.W....E..(dJ@.@.Z.._p...z..P...iI.9K..P..S{...,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 25674, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 23252, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50181, \"\"seq\"\": 3563670001, \"\"ack\"\": 961268612, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:10.386889,193,TCP 208.95.112.1:80 -> 192.168.122.168:50181,208.95.112.1,192.168.122.168,80,50181,TCP,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > HTTP > HTTPResponse > Raw,6,HTTP Response: 200,5254007bb792525400577f940800450000ec644b400040065a0fd05f7001c0a87aa80050c405d46949f1394bcb84501800537c900000485454502f312e3120323030204f4b0d0a446174653a205765642c2032392041707220323032362031343a33343a303920474d540d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e3b20636861727365743d7574662d380d0a436f6e74656e742d4c656e6774683a2032300d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a582d54746c3a2036300d0a582d526c3a2034340d0a0d0a7b22636f756e747279436f6465223a224e4c227d,\"{\"\"countryCode\"\":\"\"NL\"\"}\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 236, \"\"id\"\": 25675, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 23055, \"\"src\"\": \"\"208.95.112.1\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 80, \"\"dport\"\": 50181, \"\"seq\"\": 3563670001, \"\"ack\"\": 961268612, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 83, \"\"chksum\"\": 31888, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"HTTPResponse\"\", \"\"fields\"\": {\"\"Http_Version\"\": \"\"HTTP/1.1\"\", \"\"Status_Code\"\": \"\"200\"\", \"\"Reason_Phrase\"\": \"\"OK\"\", \"\"Accept_Patch\"\": null, \"\"Accept_Ranges\"\": null, \"\"Access_Control_Allow_Credentials\"\": null, \"\"Access_Control_Allow_Headers\"\": null, \"\"Access_Control_Allow_Methods\"\": null, \"\"Access_Control_Allow_Origin\"\": \"\"*\"\", \"\"Access_Control_Expose_Headers\"\": null, \"\"Access_Control_Max_Age\"\": null, \"\"Age\"\": null, \"\"Allow\"\": null, \"\"Alt_Svc\"\": null, \"\"Cache_Control\"\": null, \"\"Connection\"\": null, \"\"Content_Disposition\"\": null, \"\"Content_Encoding\"\": null, \"\"Content_Language\"\": null, \"\"Content_Length\"\": \"\"20\"\", \"\"Content_Location\"\": null, \"\"Content_MD5\"\": null, \"\"Content_Range\"\": null, \"\"Content_Security_Policy\"\": null, \"\"Content_Type\"\": \"\"application/json; charset=utf-8\"\", \"\"Date\"\": \"\"Wed, 29 Apr 2026 14:34:09 GMT\"\", \"\"Delta_Base\"\": null, \"\"ETag\"\": null, \"\"Expires\"\": null, \"\"IM\"\": null, \"\"Keep_Alive\"\": null, \"\"Last_Modified\"\": null, \"\"Link\"\": null, \"\"Location\"\": null, \"\"P3P\"\": null, \"\"Permanent\"\": null, \"\"Pragma\"\": null, \"\"Proxy_Authenticate\"\": null, \"\"Public_Key_Pins\"\": null, \"\"Refresh\"\": null, \"\"Retry_After\"\": null, \"\"Server\"\": null, \"\"Set_Cookie\"\": null, \"\"Status\"\": null, \"\"Strict_Transport_Security\"\": null, \"\"Timing_Allow_Origin\"\": null, \"\"Tk\"\": null, \"\"Trailer\"\": null, \"\"Transfer_Encoding\"\": null, \"\"Upgrade\"\": null, \"\"Vary\"\": null, \"\"Via\"\": null, \"\"WWW_Authenticate\"\": null, \"\"Warning\"\": null, \"\"X_Content_Duration\"\": null, \"\"X_Content_Security_Policy\"\": null, \"\"X_Content_Type_Options\"\": null, \"\"X_Correlation_ID\"\": null, \"\"X_Frame_Options\"\": null, \"\"X_Powered_By\"\": null, \"\"X_Request_ID\"\": null, \"\"X_UA_Compatible\"\": null, \"\"X_WebKit_CSP\"\": null, \"\"X_XSS_Protection\"\": null, \"\"Unknown_Headers\"\": \"\"{b'X-Ttl': b'60', b'X-Rl': b'44'}\"\"}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"countryCode\\\"\":\\\"\"NL\\\"\"}\"\"}}]\"\n2026-04-29 14:34:10.389054,194,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1371135996 Ack=17955916,525400577f945254007bb79208004500002c965040008006a329c0a87aa8b9a3cc5dc4041f9051b9dffc0111fc4c50188000c17000009f000000,....,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 44, \"\"id\"\": 38480, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41769, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371135996, \"\"ack\"\": 17955916, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49520, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"9f000000\"\"}}]\"\n2026-04-29 14:34:10.389085,195,TCP 185.163.204.93:8080 -> 192.168.122.168:50180,185.163.204.93,192.168.122.168,8080,50180,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=17955916 Ack=1371136000,5254007bb792525400577f940800450000289ed340004006daaab9a3cc5dc0a87aa81f90c4040111fc4c51b9e00050100053c16c0000,RT.{..RT.W....E..(..@.@......]..z........LQ...P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40659, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55978, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50180, \"\"seq\"\": 17955916, \"\"ack\"\": 1371136000, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:10.389176,196,TCP 192.168.122.168:50180 -> 185.163.204.93:8080,192.168.122.168,185.163.204.93,50180,8080,TCP,Internal,Private Network,,,,,,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,PA,,,Ether > IP > TCP > HTTP > Raw,5,TCP PA Seq=1371136000 Ack=17955916,525400577f945254007bb7920800450000c7965140008006a28dc0a87aa8b9a3cc5dc4041f9051b9e0000111fc4c50188000c20b00007b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d,\"{\"\"type\"\":\"\"info\"\",\"\"data\"\":{\"\"hostname\"\":\"\"DESKTOP-JLCUPK0\"\",\"\"username\"\":\"\"0xKal\"\",\"\"os\"\":\"\"Microsoft Windows 10 Pro 10.0.19044\"\",\"\"country\"\":\"\"NL\"\",\"\"monitors\"\":1,\"\"wallets\"\":false}}\",[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 199, \"\"id\"\": 38481, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 41613, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"185.163.204.93\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50180, \"\"dport\"\": 8080, \"\"seq\"\": 1371136000, \"\"ack\"\": 17955916, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 32768, \"\"chksum\"\": 49675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"HTTP\"\", \"\"fields\"\": {}}, {\"\"layer\"\": \"\"Raw\"\", \"\"fields\"\": {\"\"load\"\": \"\"{\\\"\"type\\\"\":\\\"\"info\\\"\",\\\"\"data\\\"\":{\\\"\"hostname\\\"\":\\\"\"DESKTOP-JLCUPK0\\\"\",\\\"\"username\\\"\":\\\"\"0xKal\\\"\",\\\"\"os\\\"\":\\\"\"Microsoft Windows 10 Pro 10.0.19044\\\"\",\\\"\"country\\\"\":\\\"\"NL\\\"\",\\\"\"monitors\\\"\":1,\\\"\"wallets\\\"\":false}}\"\"}}]\"\n2026-04-29 14:34:10.389184,197,TCP 185.163.204.93:8080 -> 192.168.122.168:50180,185.163.204.93,192.168.122.168,8080,50180,TCP,Hungary,Budapest,56322,ServerAstra Kft.,47.5,19.0412,185.163.204.0/24,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=17955916 Ack=1371136159,5254007bb792525400577f940800450000289ed440004006daa9b9a3cc5dc0a87aa81f90c4040111fc4c51b9e09f50100053c16c0000,RT.{..RT.W....E..(..@.@......]..z........LQ...P..S.l..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:7b:b7:92\"\", \"\"src\"\": \"\"52:54:00:57:7f:94\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 40660, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 55977, \"\"src\"\": \"\"185.163.204.93\"\", \"\"dst\"\": \"\"192.168.122.168\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 8080, \"\"dport\"\": 50180, \"\"seq\"\": 17955916, \"\"ack\"\": 1371136159, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 83, \"\"chksum\"\": 49516, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 14:34:10.438023,198,TCP 192.168.122.168:50181 -> 208.95.112.1:80,192.168.122.168,208.95.112.1,50181,80,TCP,Internal,Private Network,,,,,,United States,Unknown,53334,\"Total Uptime Technologies, LLC\",37.751,-97.822,208.95.112.0/21,A,,,Ether > IP > TCP,3,TCP A Seq=961268612 Ack=3563670197,525400577f945254007bb79208004500002806f8400080067826c0a87aa8d05f7001c4050050394bcb84d4694ab5501020137bcc0000,RT.W..RT.{....E..(..@...x&..z.._p....P9K...iJ.P. .{...,[C2] Staged Payload Source (Stages: 8),\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 1784, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30758, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"208.95.112.1\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 50181, \"\"dport\"\": 80, \"\"seq\"\": 961268612, \"\"ack\"\": 3563670197, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 31692, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 198, \"total_bytes_sent\": 10576, \"total_bytes_received\": 6291, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Raw\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\"], \"ports_used\": [49899, 49892, 50062, 50095, 50096, 50101, 50144, 50145, 50161, 50162, 50176, 50177, 50180, 50181], \"first_seen\": 1777472938.193546, \"last_seen\": 1777473250.438023, \"packets\": [{\"num\": 148, \"time\": 1777473184.207785, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 149, \"time\": 1777473184.207833, \"size\": 66, \"direction\": \"received\"}, {\"num\": 150, \"time\": 1777473184.20797, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 151, \"time\": 1777473184.428378, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 152, \"time\": 1777473184.428419, \"size\": 54, \"direction\": \"received\"}, {\"num\": 153, \"time\": 1777473184.429139, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 154, \"time\": 1777473184.429178, \"size\": 66, \"direction\": \"received\"}, {\"num\": 155, \"time\": 1777473184.429258, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 156, \"time\": 1777473184.429573, \"size\": 139, \"direction\": \"sent\"}, {\"num\": 157, \"time\": 1777473184.429588, \"size\": 54, \"direction\": \"received\"}, {\"num\": 158, \"time\": 1777473184.87021, \"size\": 250, \"direction\": \"received\"}, {\"num\": 159, \"time\": 1777473184.872247, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 160, \"time\": 1777473184.872277, \"size\": 54, \"direction\": \"received\"}, {\"num\": 161, \"time\": 1777473184.872368, \"size\": 213, \"direction\": \"sent\"}, {\"num\": 162, \"time\": 1777473184.872375, \"size\": 54, \"direction\": \"received\"}, {\"num\": 163, \"time\": 1777473184.920066, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 164, \"time\": 1777473194.880125, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 165, \"time\": 1777473194.880161, \"size\": 66, \"direction\": \"received\"}, {\"num\": 166, \"time\": 1777473204.882105, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 167, \"time\": 1777473204.882137, \"size\": 66, \"direction\": \"received\"}, {\"num\": 168, \"time\": 1777473214.891823, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 169, \"time\": 1777473214.891854, \"size\": 66, \"direction\": \"received\"}, {\"num\": 170, \"time\": 1777473224.894135, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 171, \"time\": 1777473224.894165, \"size\": 66, \"direction\": \"received\"}, {\"num\": 172, \"time\": 1777473234.898346, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 173, \"time\": 1777473234.898374, \"size\": 66, \"direction\": \"received\"}, {\"num\": 174, \"time\": 1777473238.211732, \"size\": 54, \"direction\": \"received\"}, {\"num\": 175, \"time\": 1777473238.211946, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 176, \"time\": 1777473244.906947, \"size\": 55, \"direction\": \"sent\"}, {\"num\": 177, \"time\": 1777473244.906977, \"size\": 66, \"direction\": \"received\"}, {\"num\": 178, \"time\": 1777473249.251587, \"size\": 54, \"direction\": \"received\"}, {\"num\": 179, \"time\": 1777473249.251779, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 180, \"time\": 1777473249.275904, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 181, \"time\": 1777473249.275935, \"size\": 54, \"direction\": \"received\"}, {\"num\": 182, \"time\": 1777473249.294562, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 183, \"time\": 1777473249.294615, \"size\": 66, \"direction\": \"received\"}, {\"num\": 184, \"time\": 1777473249.294761, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 185, \"time\": 1777473249.521297, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 186, \"time\": 1777473249.52133, \"size\": 54, \"direction\": \"received\"}, {\"num\": 187, \"time\": 1777473249.802086, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 188, \"time\": 1777473249.802133, \"size\": 66, \"direction\": \"received\"}, {\"num\": 189, \"time\": 1777473249.802235, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 190, \"time\": 1777473249.802516, \"size\": 139, \"direction\": \"sent\"}, {\"num\": 191, \"time\": 1777473249.802533, \"size\": 54, \"direction\": \"received\"}, {\"num\": 192, \"time\": 1777473250.386889, \"size\": 250, \"direction\": \"received\"}, {\"num\": 193, \"time\": 1777473250.389054, \"size\": 58, \"direction\": \"sent\"}, {\"num\": 194, \"time\": 1777473250.389085, \"size\": 54, \"direction\": \"received\"}, {\"num\": 195, \"time\": 1777473250.389176, \"size\": 213, \"direction\": \"sent\"}, {\"num\": 196, \"time\": 1777473250.389184, \"size\": 54, \"direction\": \"received\"}, {\"num\": 197, \"time\": 1777473250.438023, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 312.2444770336151, \"avg_packet_size\": 85.18686868686869, \"packets_per_second\": 0.6341185018900559}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes_sent\": 0, \"total_bytes_received\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777472938.193546, \"last_seen\": 1777472962.033117, \"packets\": [{\"num\": 0, \"time\": 1777472938.193546, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777472938.521026, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777472939.12722, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777472940.331285, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777472940.543456, \"size\": 302, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777472940.836897, \"size\": 302, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777472941.446243, \"size\": 302, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777472941.539992, \"size\": 153, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777472942.650424, \"size\": 302, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777472942.744187, \"size\": 153, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777472943.853568, \"size\": 302, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777472945.054065, \"size\": 302, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777472945.147772, \"size\": 153, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777472947.462651, \"size\": 302, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777472950.040923, \"size\": 153, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777472952.348924, \"size\": 302, \"direction\": \"received\"}, {\"num\": 25, \"time\": 1777472959.736234, \"size\": 54, \"direction\": \"received\"}, {\"num\": 28, \"time\": 1777472962.033117, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 23.839570999145508, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7550471441220642}, {\"id\": \"46.105.59.197\", \"ip\": \"46.105.59.197\", \"packet_count\": 14, \"total_bytes_sent\": 734, \"total_bytes_received\": 421, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"ports_used\": [21], \"first_seen\": 1777472955.473425, \"last_seen\": 1777472969.756012, \"packets\": [{\"num\": 16, \"time\": 1777472955.473425, \"size\": 66, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1777472955.473469, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1777472955.490651, \"size\": 54, \"direction\": \"received\"}, {\"num\": 19, \"time\": 1777472955.823269, \"size\": 323, \"direction\": \"sent\"}, {\"num\": 20, \"time\": 1777472955.876067, \"size\": 70, \"direction\": \"received\"}, {\"num\": 21, \"time\": 1777472955.876088, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 22, \"time\": 1777472956.221838, \"size\": 96, \"direction\": \"sent\"}, {\"num\": 23, \"time\": 1777472956.258995, \"size\": 69, \"direction\": \"received\"}, {\"num\": 24, \"time\": 1777472956.259015, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 26, \"time\": 1777472961.418313, \"size\": 87, \"direction\": \"sent\"}, {\"num\": 27, \"time\": 1777472961.533084, \"size\": 54, \"direction\": \"received\"}, {\"num\": 29, \"time\": 1777472969.755815, \"size\": 54, \"direction\": \"received\"}, {\"num\": 30, \"time\": 1777472969.755913, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 31, \"time\": 1777472969.756012, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"France\", \"city\": \"Unknown\", \"lat\": 48.8582, \"lon\": 2.3387, \"asn\": 16276, \"isp\": \"OVH SAS\", \"network\": \"46.105.58.0/23\"}, \"duration\": 14.282587051391602, \"avg_packet_size\": 82.5, \"packets_per_second\": 0.9802145752464314}, {\"id\": \"185.163.204.93\", \"ip\": \"185.163.204.93\", \"packet_count\": 115, \"total_bytes_sent\": 3276, \"total_bytes_received\": 4386, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"ports_used\": [8080], \"first_seen\": 1777472983.359526, \"last_seen\": 1777473250.389184, \"packets\": [{\"num\": 125, \"time\": 1777473119.435064, \"size\": 58, \"direction\": \"received\"}, {\"num\": 126, \"time\": 1777473119.435096, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 127, \"time\": 1777473119.435242, \"size\": 213, \"direction\": \"received\"}, {\"num\": 128, \"time\": 1777473119.435252, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 130, \"time\": 1777473129.52342, \"size\": 55, \"direction\": \"received\"}, {\"num\": 131, \"time\": 1777473129.523454, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 132, \"time\": 1777473139.525754, \"size\": 55, \"direction\": \"received\"}, {\"num\": 133, \"time\": 1777473139.525796, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 134, \"time\": 1777473149.538419, \"size\": 55, \"direction\": \"received\"}, {\"num\": 135, \"time\": 1777473149.538471, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 136, \"time\": 1777473159.542306, \"size\": 55, \"direction\": \"received\"}, {\"num\": 137, \"time\": 1777473159.542328, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 140, \"time\": 1777473169.556296, \"size\": 55, \"direction\": \"received\"}, {\"num\": 141, \"time\": 1777473169.556331, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 142, \"time\": 1777473179.57177, \"size\": 55, \"direction\": \"received\"}, {\"num\": 143, \"time\": 1777473179.571812, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 144, \"time\": 1777473184.163963, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 145, \"time\": 1777473184.16431, \"size\": 54, \"direction\": \"received\"}, {\"num\": 146, \"time\": 1777473184.188797, \"size\": 54, \"direction\": \"received\"}, {\"num\": 147, \"time\": 1777473184.188821, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 148, \"time\": 1777473184.207785, \"size\": 66, \"direction\": \"received\"}, {\"num\": 149, \"time\": 1777473184.207833, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 150, \"time\": 1777473184.20797, \"size\": 54, \"direction\": \"received\"}, {\"num\": 159, \"time\": 1777473184.872247, \"size\": 58, \"direction\": \"received\"}, {\"num\": 160, \"time\": 1777473184.872277, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 161, \"time\": 1777473184.872368, \"size\": 213, \"direction\": \"received\"}, {\"num\": 162, \"time\": 1777473184.872375, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 164, \"time\": 1777473194.880125, \"size\": 55, \"direction\": \"received\"}, {\"num\": 165, \"time\": 1777473194.880161, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 166, \"time\": 1777473204.882105, \"size\": 55, \"direction\": \"received\"}, {\"num\": 167, \"time\": 1777473204.882137, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 168, \"time\": 1777473214.891823, \"size\": 55, \"direction\": \"received\"}, {\"num\": 169, \"time\": 1777473214.891854, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 170, \"time\": 1777473224.894135, \"size\": 55, \"direction\": \"received\"}, {\"num\": 171, \"time\": 1777473224.894165, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 172, \"time\": 1777473234.898346, \"size\": 55, \"direction\": \"received\"}, {\"num\": 173, \"time\": 1777473234.898374, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 176, \"time\": 1777473244.906947, \"size\": 55, \"direction\": \"received\"}, {\"num\": 177, \"time\": 1777473244.906977, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 178, \"time\": 1777473249.251587, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 179, \"time\": 1777473249.251779, \"size\": 54, \"direction\": \"received\"}, {\"num\": 180, \"time\": 1777473249.275904, \"size\": 54, \"direction\": \"received\"}, {\"num\": 181, \"time\": 1777473249.275935, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 182, \"time\": 1777473249.294562, \"size\": 66, \"direction\": \"received\"}, {\"num\": 183, \"time\": 1777473249.294615, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 184, \"time\": 1777473249.294761, \"size\": 54, \"direction\": \"received\"}, {\"num\": 193, \"time\": 1777473250.389054, \"size\": 58, \"direction\": \"received\"}, {\"num\": 194, \"time\": 1777473250.389085, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 195, \"time\": 1777473250.389176, \"size\": 213, \"direction\": \"received\"}, {\"num\": 196, \"time\": 1777473250.389184, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Hungary\", \"city\": \"Budapest\", \"lat\": 47.5, \"lon\": 19.0412, \"asn\": 56322, \"isp\": \"ServerAstra Kft.\", \"network\": \"185.163.204.0/24\"}, \"duration\": 267.02965807914734, \"avg_packet_size\": 66.62608695652175, \"packets_per_second\": 0.4306637728080156}, {\"id\": \"208.95.112.1\", \"ip\": \"208.95.112.1\", \"packet_count\": 51, \"total_bytes_sent\": 2281, \"total_bytes_received\": 2021, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\", \"HTTPResponse\", \"Raw\"], \"ports_used\": [80], \"first_seen\": 1777472986.434403, \"last_seen\": 1777473250.438023, \"packets\": [{\"num\": 52, \"time\": 1777472986.434474, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 53, \"time\": 1777472986.434692, \"size\": 54, \"direction\": \"received\"}, {\"num\": 54, \"time\": 1777472986.439405, \"size\": 163, \"direction\": \"received\"}, {\"num\": 55, \"time\": 1777472986.439427, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 56, \"time\": 1777472986.967336, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 57, \"time\": 1777472987.011083, \"size\": 54, \"direction\": \"received\"}, {\"num\": 68, \"time\": 1777473021.344763, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 69, \"time\": 1777473021.344924, \"size\": 54, \"direction\": \"received\"}, {\"num\": 83, \"time\": 1777473053.63862, \"size\": 54, \"direction\": \"received\"}, {\"num\": 84, \"time\": 1777473053.638683, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 85, \"time\": 1777473053.640511, \"size\": 66, \"direction\": \"received\"}, {\"num\": 86, \"time\": 1777473053.64057, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 87, \"time\": 1777473053.640649, \"size\": 54, \"direction\": \"received\"}, {\"num\": 88, \"time\": 1777473053.641256, \"size\": 139, \"direction\": \"received\"}, {\"num\": 89, \"time\": 1777473053.641276, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 90, \"time\": 1777473053.992047, \"size\": 249, \"direction\": \"sent\"}, {\"num\": 95, \"time\": 1777473054.034127, \"size\": 54, \"direction\": \"received\"}, {\"num\": 106, \"time\": 1777473107.033002, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 107, \"time\": 1777473107.033208, \"size\": 54, \"direction\": \"received\"}, {\"num\": 117, \"time\": 1777473118.401279, \"size\": 54, \"direction\": \"received\"}, {\"num\": 118, \"time\": 1777473118.401311, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 119, \"time\": 1777473118.657902, \"size\": 66, \"direction\": \"received\"}, {\"num\": 120, \"time\": 1777473118.657953, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 121, \"time\": 1777473118.658083, \"size\": 54, \"direction\": \"received\"}, {\"num\": 122, \"time\": 1777473118.658254, \"size\": 139, \"direction\": \"received\"}, {\"num\": 123, \"time\": 1777473118.658269, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 124, \"time\": 1777473119.4331, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 129, \"time\": 1777473119.523634, \"size\": 54, \"direction\": \"received\"}, {\"num\": 138, \"time\": 1777473160.343693, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 139, \"time\": 1777473160.343861, \"size\": 54, \"direction\": \"received\"}, {\"num\": 151, \"time\": 1777473184.428378, \"size\": 54, \"direction\": \"received\"}, {\"num\": 152, \"time\": 1777473184.428419, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 153, \"time\": 1777473184.429139, \"size\": 66, \"direction\": \"received\"}, {\"num\": 154, \"time\": 1777473184.429178, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 155, \"time\": 1777473184.429258, \"size\": 54, \"direction\": \"received\"}, {\"num\": 156, \"time\": 1777473184.429573, \"size\": 139, \"direction\": \"received\"}, {\"num\": 157, \"time\": 1777473184.429588, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 158, \"time\": 1777473184.87021, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 163, \"time\": 1777473184.920066, \"size\": 54, \"direction\": \"received\"}, {\"num\": 174, \"time\": 1777473238.211732, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 175, \"time\": 1777473238.211946, \"size\": 54, \"direction\": \"received\"}, {\"num\": 185, \"time\": 1777473249.521297, \"size\": 54, \"direction\": \"received\"}, {\"num\": 186, \"time\": 1777473249.52133, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 187, \"time\": 1777473249.802086, \"size\": 66, \"direction\": \"received\"}, {\"num\": 188, \"time\": 1777473249.802133, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 189, \"time\": 1777473249.802235, \"size\": 54, \"direction\": \"received\"}, {\"num\": 190, \"time\": 1777473249.802516, \"size\": 139, \"direction\": \"received\"}, {\"num\": 191, \"time\": 1777473249.802533, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 192, \"time\": 1777473250.386889, \"size\": 250, \"direction\": \"sent\"}, {\"num\": 197, \"time\": 1777473250.438023, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"United States\", \"city\": \"Unknown\", \"lat\": 37.751, \"lon\": -97.822, \"asn\": 53334, \"isp\": \"Total Uptime Technologies, LLC\", \"network\": \"208.95.112.0/21\"}, \"duration\": 264.0036201477051, \"avg_packet_size\": 84.3529411764706, \"packets_per_second\": 0.19317916917755315}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 18, \"total_bytes\": 3748, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777472938.193546, \"last_packet\": 1777472962.033117, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777472938.193546, \"timestamp_iso\": \"2026-04-29T19:58:58.193546\", \"timestamp_human\": \"2026-04-29 19:58:58.193\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777472938.521026, \"timestamp_iso\": \"2026-04-29T19:58:58.521026\", \"timestamp_human\": \"2026-04-29 19:58:58.521\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777472939.12722, \"timestamp_iso\": \"2026-04-29T19:58:59.127220\", \"timestamp_human\": \"2026-04-29 19:58:59.127\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777472940.331285, \"timestamp_iso\": \"2026-04-29T19:59:00.331285\", \"timestamp_human\": \"2026-04-29 19:59:00.331\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777472940.543456, \"timestamp_iso\": \"2026-04-29T19:59:00.543456\", \"timestamp_human\": \"2026-04-29 19:59:00.543\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777472940.836897, \"timestamp_iso\": \"2026-04-29T19:59:00.836897\", \"timestamp_human\": \"2026-04-29 19:59:00.836\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777472941.446243, \"timestamp_iso\": \"2026-04-29T19:59:01.446243\", \"timestamp_human\": \"2026-04-29 19:59:01.446\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777472941.539992, \"timestamp_iso\": \"2026-04-29T19:59:01.539992\", \"timestamp_human\": \"2026-04-29 19:59:01.539\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777472942.650424, \"timestamp_iso\": \"2026-04-29T19:59:02.650424\", \"timestamp_human\": \"2026-04-29 19:59:02.650\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777472942.744187, \"timestamp_iso\": \"2026-04-29T19:59:02.744187\", \"timestamp_human\": \"2026-04-29 19:59:02.744\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777472943.853568, \"timestamp_iso\": \"2026-04-29T19:59:03.853568\", \"timestamp_human\": \"2026-04-29 19:59:03.853\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 288, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777472945.054065, \"timestamp_iso\": \"2026-04-29T19:59:05.054065\", \"timestamp_human\": \"2026-04-29 19:59:05.054\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777472945.147772, \"timestamp_iso\": \"2026-04-29T19:59:05.147772\", \"timestamp_human\": \"2026-04-29 19:59:05.147\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777472947.462651, \"timestamp_iso\": \"2026-04-29T19:59:07.462651\", \"timestamp_human\": \"2026-04-29 19:59:07.462\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777472950.040923, \"timestamp_iso\": \"2026-04-29T19:59:10.040923\", \"timestamp_human\": \"2026-04-29 19:59:10.040\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777472952.348924, \"timestamp_iso\": \"2026-04-29T19:59:12.348924\", \"timestamp_human\": \"2026-04-29 19:59:12.348\", \"size\": 302, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 288, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 25, \"timestamp\": 1777472959.736234, \"timestamp_iso\": \"2026-04-29T19:59:19.736234\", \"timestamp_human\": \"2026-04-29 19:59:19.736\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46861, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 28, \"timestamp\": 1777472962.033117, \"timestamp_iso\": \"2026-04-29T19:59:22.033117\", \"timestamp_human\": \"2026-04-29 19:59:22.033\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46862, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411405, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 16, \"ACK\": 18, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 302, 302, 302, 153, 302, 153, 302, 302, 153, 302, 153, 302, 54, 54], \"inter_packet_intervals\": [0.32747983932495117, 0.606194019317627, 1.2040650844573975, 0.21217107772827148, 0.2934408187866211, 0.6093461513519287, 0.0937490463256836, 1.1104319095611572, 0.09376311302185059, 1.1093809604644775, 1.2004969120025635, 0.09370708465576172, 2.3148789405822754, 2.5782721042633057, 2.3080008029937744, 7.387310028076172, 2.2968831062316895], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 23.839570999145508, \"avg_packet_size\": 208.22222222222223, \"packets_per_second\": 0.7550471441220642, \"bytes_per_second\": 157.21759423163869, \"min_packet_size\": 54, \"max_packet_size\": 302, \"median_packet_size\": 153, \"avg_interval\": 1.4023277058320887, \"min_interval\": 0.09370708465576172, \"max_interval\": 7.387310028076172}, {\"source\": \"192.168.122.168\", \"target\": \"46.105.59.197\", \"packet_count\": 7, \"total_bytes\": 421, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [50062], \"dst_ports\": [21], \"first_packet\": 1777472955.473425, \"last_packet\": 1777472969.756012, \"packets\": [{\"packet_number\": 16, \"timestamp\": 1777472955.473425, \"timestamp_iso\": \"2026-04-29T19:59:15.473425\", \"timestamp_human\": \"2026-04-29 19:59:15.473\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 847, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849431, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 18, \"timestamp\": 1777472955.490651, \"timestamp_iso\": \"2026-04-29T19:59:15.490651\", \"timestamp_human\": \"2026-04-29 19:59:15.490\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 848, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849432, \"tcp_ack\": 1324414933, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 20, \"timestamp\": 1777472955.876067, \"timestamp_iso\": \"2026-04-29T19:59:15.876067\", \"timestamp_human\": \"2026-04-29 19:59:15.876\", \"size\": 70, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 849, \"ip_len\": 56, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849432, \"tcp_ack\": 1324415202, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 16, \"payload_preview\": \"555345522061646d696e5f73796e0d0a\", \"payload_ascii\": \"USER admin_syn\\r\\n\"}, {\"packet_number\": 23, \"timestamp\": 1777472956.258995, \"timestamp_iso\": \"2026-04-29T19:59:16.258995\", \"timestamp_human\": \"2026-04-29 19:59:16.258\", \"size\": 69, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 850, \"ip_len\": 55, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849448, \"tcp_ack\": 1324415244, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 15, \"payload_preview\": \"5041535320426c61636b3930300d0a\", \"payload_ascii\": \"PASS Black900\\r\\n\"}, {\"packet_number\": 27, \"timestamp\": 1777472961.533084, \"timestamp_iso\": \"2026-04-29T19:59:21.533084\", \"timestamp_human\": \"2026-04-29 19:59:21.533\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 851, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849463, \"tcp_ack\": 1324415277, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 29, \"timestamp\": 1777472969.755815, \"timestamp_iso\": \"2026-04-29T19:59:29.755815\", \"timestamp_human\": \"2026-04-29 19:59:29.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 852, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849463, \"tcp_ack\": 1324415277, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 31, \"timestamp\": 1777472969.756012, \"timestamp_iso\": \"2026-04-29T19:59:29.756012\", \"timestamp_human\": \"2026-04-29 19:59:29.756\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"46.105.59.197\", \"ttl\": 128, \"ip_id\": 853, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50062, \"dst_port\": 21, \"tcp_seq\": 941849464, \"tcp_ack\": 1324415278, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 6, \"PSH\": 2, \"FIN\": 1}, \"packet_sizes\": [66, 54, 70, 69, 54, 54, 54], \"inter_packet_intervals\": [0.017225980758666992, 0.38541603088378906, 0.38292813301086426, 5.2740888595581055, 8.222731113433838, 0.00019693374633789062], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 14.282587051391602, \"avg_packet_size\": 60.142857142857146, \"packets_per_second\": 0.4901072876232157, \"bytes_per_second\": 29.47645258419626, \"min_packet_size\": 54, \"max_packet_size\": 70, \"median_packet_size\": 54, \"avg_interval\": 2.3804311752319336, \"min_interval\": 0.00019693374633789062, \"max_interval\": 8.222731113433838}, {\"source\": \"46.105.59.197\", \"target\": \"192.168.122.168\", \"packet_count\": 7, \"total_bytes\": 734, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ports\": [21], \"dst_ports\": [50062], \"first_packet\": 1777472955.473469, \"last_packet\": 1777472969.755913, \"packets\": [{\"packet_number\": 17, \"timestamp\": 1777472955.473469, \"timestamp_iso\": \"2026-04-29T19:59:15.473469\", \"timestamp_human\": \"2026-04-29 19:59:15.473\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324414932, \"tcp_ack\": 941849432, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 19, \"timestamp\": 1777472955.823269, \"timestamp_iso\": \"2026-04-29T19:59:15.823269\", \"timestamp_human\": \"2026-04-29 19:59:15.823\", \"size\": 323, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61378, \"ip_len\": 309, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324414933, \"tcp_ack\": 941849432, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 269, \"payload_preview\": \"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\", \"payload_ascii\": \"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\\r\\n220-You are user number 1 of 50 allowed.\\r\\n220-Local time is now 14:29. Server port: 21.\\r\\n220-IPv6 connections are also welcome on this server.\\r\\n220 You will be disconnected after 15 minutes of inactivity.\\r\\n\"}, {\"packet_number\": 21, \"timestamp\": 1777472955.876088, \"timestamp_iso\": \"2026-04-29T19:59:15.876088\", \"timestamp_human\": \"2026-04-29 19:59:15.876\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61379, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415202, \"tcp_ack\": 941849448, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 22, \"timestamp\": 1777472956.221838, \"timestamp_iso\": \"2026-04-29T19:59:16.221838\", \"timestamp_human\": \"2026-04-29 19:59:16.221\", \"size\": 96, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61380, \"ip_len\": 82, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415202, \"tcp_ack\": 941849448, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 42, \"payload_preview\": \"33333120557365722061646d696e5f73796e204f4b2e2050617373776f72642072657175697265640d0a\", \"payload_ascii\": \"331 User admin_syn OK. Password required\\r\\n\"}, {\"packet_number\": 24, \"timestamp\": 1777472956.259015, \"timestamp_iso\": \"2026-04-29T19:59:16.259015\", \"timestamp_human\": \"2026-04-29 19:59:16.259\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61381, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415244, \"tcp_ack\": 941849463, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 26, \"timestamp\": 1777472961.418313, \"timestamp_iso\": \"2026-04-29T19:59:21.418313\", \"timestamp_human\": \"2026-04-29 19:59:21.418\", \"size\": 87, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"Raw\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61382, \"ip_len\": 73, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415244, \"tcp_ack\": 941849463, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 33, \"payload_preview\": \"353330204c6f67696e2061757468656e7469636174696f6e206661696c65640d0a\", \"payload_ascii\": \"530 Login authentication failed\\r\\n\"}, {\"packet_number\": 30, \"timestamp\": 1777472969.755913, \"timestamp_iso\": \"2026-04-29T19:59:29.755913\", \"timestamp_human\": \"2026-04-29 19:59:29.755\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"46.105.59.197\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 61383, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 21, \"dst_port\": 50062, \"tcp_seq\": 1324415277, \"tcp_ack\": 941849464, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 7, \"PSH\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 323, 54, 96, 54, 87, 54], \"inter_packet_intervals\": [0.34979987144470215, 0.052819013595581055, 0.345750093460083, 0.037177085876464844, 5.159297943115234, 8.337599992752075], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 14.28244400024414, \"avg_packet_size\": 104.85714285714286, \"packets_per_second\": 0.49011219647564125, \"bytes_per_second\": 51.391764601874385, \"min_packet_size\": 54, \"max_packet_size\": 323, \"median_packet_size\": 66, \"avg_interval\": 2.3804073333740234, \"min_interval\": 0.037177085876464844, \"max_interval\": 8.337599992752075}, {\"source\": \"192.168.122.168\", \"target\": \"185.163.204.93\", \"packet_count\": 61, \"total_bytes\": 4386, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ports\": [50095, 50096, 50144, 50161, 50176, 50180], \"dst_ports\": [8080], \"first_packet\": 1777472983.359526, \"last_packet\": 1777473250.389176, \"packets\": [{\"packet_number\": 58, \"timestamp\": 1777472987.026153, \"timestamp_iso\": \"2026-04-29T19:59:47.026153\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38432, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488115, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 60, \"timestamp\": 1777472987.026278, \"timestamp_iso\": \"2026-04-29T19:59:47.026278\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38433, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488119, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 62, \"timestamp\": 1777472997.101824, \"timestamp_iso\": \"2026-04-29T19:59:57.101824\", \"timestamp_human\": \"2026-04-29 19:59:57.101\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38434, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 64, \"timestamp\": 1777473007.116476, \"timestamp_iso\": \"2026-04-29T20:00:07.116476\", \"timestamp_human\": \"2026-04-29 20:00:07.116\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38435, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 66, \"timestamp\": 1777473017.145904, \"timestamp_iso\": \"2026-04-29T20:00:17.145904\", \"timestamp_human\": \"2026-04-29 20:00:17.145\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38436, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 70, \"timestamp\": 1777473027.321735, \"timestamp_iso\": \"2026-04-29T20:00:27.321735\", \"timestamp_human\": \"2026-04-29 20:00:27.321\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38437, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 72, \"timestamp\": 1777473037.335287, \"timestamp_iso\": \"2026-04-29T20:00:37.335287\", \"timestamp_human\": \"2026-04-29 20:00:37.335\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38438, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 74, \"timestamp\": 1777473047.430411, \"timestamp_iso\": \"2026-04-29T20:00:47.430411\", \"timestamp_human\": \"2026-04-29 20:00:47.430\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38439, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488277, \"tcp_ack\": 747942180, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 77, \"timestamp\": 1777473053.002993, \"timestamp_iso\": \"2026-04-29T20:00:53.002993\", \"timestamp_human\": \"2026-04-29 20:00:53.002\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38440, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488278, \"tcp_ack\": 747942181, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 78, \"timestamp\": 1777473053.053412, \"timestamp_iso\": \"2026-04-29T20:00:53.053412\", \"timestamp_human\": \"2026-04-29 20:00:53.053\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38441, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50096, \"dst_port\": 8080, \"tcp_seq\": 1897488278, \"tcp_ack\": 747942181, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 80, \"timestamp\": 1777473053.071634, \"timestamp_iso\": \"2026-04-29T20:00:53.071634\", \"timestamp_human\": \"2026-04-29 20:00:53.071\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38442, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558933, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 82, \"timestamp\": 1777473053.071813, \"timestamp_iso\": \"2026-04-29T20:00:53.071813\", \"timestamp_human\": \"2026-04-29 20:00:53.071\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38443, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558934, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 91, \"timestamp\": 1777473053.994523, \"timestamp_iso\": \"2026-04-29T20:00:53.994523\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38444, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558934, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 93, \"timestamp\": 1777473053.994689, \"timestamp_iso\": \"2026-04-29T20:00:53.994689\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38445, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125558938, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 96, \"timestamp\": 1777473064.002795, \"timestamp_iso\": \"2026-04-29T20:01:04.002795\", \"timestamp_human\": \"2026-04-29 20:01:04.002\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38446, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 98, \"timestamp\": 1777473074.092766, \"timestamp_iso\": \"2026-04-29T20:01:14.092766\", \"timestamp_human\": \"2026-04-29 20:01:14.092\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38447, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 100, \"timestamp\": 1777473084.09463, \"timestamp_iso\": \"2026-04-29T20:01:24.094630\", \"timestamp_human\": \"2026-04-29 20:01:24.094\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38448, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 102, \"timestamp\": 1777473094.185255, \"timestamp_iso\": \"2026-04-29T20:01:34.185255\", \"timestamp_human\": \"2026-04-29 20:01:34.185\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38449, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 104, \"timestamp\": 1777473104.197089, \"timestamp_iso\": \"2026-04-29T20:01:44.197089\", \"timestamp_human\": \"2026-04-29 20:01:44.197\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38450, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 108, \"timestamp\": 1777473114.292149, \"timestamp_iso\": \"2026-04-29T20:01:54.292149\", \"timestamp_human\": \"2026-04-29 20:01:54.292\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38451, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559096, \"tcp_ack\": 2135233062, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 111, \"timestamp\": 1777473118.08424, \"timestamp_iso\": \"2026-04-29T20:01:58.084240\", \"timestamp_human\": \"2026-04-29 20:01:58.084\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38452, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559097, \"tcp_ack\": 2135233063, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 112, \"timestamp\": 1777473118.140543, \"timestamp_iso\": \"2026-04-29T20:01:58.140543\", \"timestamp_human\": \"2026-04-29 20:01:58.140\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38453, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50144, \"dst_port\": 8080, \"tcp_seq\": 1125559097, \"tcp_ack\": 2135233063, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 114, \"timestamp\": 1777473118.167541, \"timestamp_iso\": \"2026-04-29T20:01:58.167541\", \"timestamp_human\": \"2026-04-29 20:01:58.167\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38454, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483791, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 116, \"timestamp\": 1777473118.1677, \"timestamp_iso\": \"2026-04-29T20:01:58.167700\", \"timestamp_human\": \"2026-04-29 20:01:58.167\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38455, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483792, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 125, \"timestamp\": 1777473119.435064, \"timestamp_iso\": \"2026-04-29T20:01:59.435064\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38456, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483792, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 127, \"timestamp\": 1777473119.435242, \"timestamp_iso\": \"2026-04-29T20:01:59.435242\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38457, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483796, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a225553222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"US\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 130, \"timestamp\": 1777473129.52342, \"timestamp_iso\": \"2026-04-29T20:02:09.523420\", \"timestamp_human\": \"2026-04-29 20:02:09.523\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38458, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 132, \"timestamp\": 1777473139.525754, \"timestamp_iso\": \"2026-04-29T20:02:19.525754\", \"timestamp_human\": \"2026-04-29 20:02:19.525\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38459, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 134, \"timestamp\": 1777473149.538419, \"timestamp_iso\": \"2026-04-29T20:02:29.538419\", \"timestamp_human\": \"2026-04-29 20:02:29.538\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38460, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 136, \"timestamp\": 1777473159.542306, \"timestamp_iso\": \"2026-04-29T20:02:39.542306\", \"timestamp_human\": \"2026-04-29 20:02:39.542\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38461, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 140, \"timestamp\": 1777473169.556296, \"timestamp_iso\": \"2026-04-29T20:02:49.556296\", \"timestamp_human\": \"2026-04-29 20:02:49.556\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38462, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 142, \"timestamp\": 1777473179.57177, \"timestamp_iso\": \"2026-04-29T20:02:59.571770\", \"timestamp_human\": \"2026-04-29 20:02:59.571\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38463, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483954, \"tcp_ack\": 199973463, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 145, \"timestamp\": 1777473184.16431, \"timestamp_iso\": \"2026-04-29T20:03:04.164310\", \"timestamp_human\": \"2026-04-29 20:03:04.164\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38464, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483955, \"tcp_ack\": 199973464, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 146, \"timestamp\": 1777473184.188797, \"timestamp_iso\": \"2026-04-29T20:03:04.188797\", \"timestamp_human\": \"2026-04-29 20:03:04.188\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38465, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50161, \"dst_port\": 8080, \"tcp_seq\": 2775483955, \"tcp_ack\": 199973464, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 148, \"timestamp\": 1777473184.207785, \"timestamp_iso\": \"2026-04-29T20:03:04.207785\", \"timestamp_human\": \"2026-04-29 20:03:04.207\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38466, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940484, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 150, \"timestamp\": 1777473184.20797, \"timestamp_iso\": \"2026-04-29T20:03:04.207970\", \"timestamp_human\": \"2026-04-29 20:03:04.207\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38467, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940485, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 159, \"timestamp\": 1777473184.872247, \"timestamp_iso\": \"2026-04-29T20:03:04.872247\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38468, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940485, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 161, \"timestamp\": 1777473184.872368, \"timestamp_iso\": \"2026-04-29T20:03:04.872368\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38469, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940489, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}, {\"packet_number\": 164, \"timestamp\": 1777473194.880125, \"timestamp_iso\": \"2026-04-29T20:03:14.880125\", \"timestamp_human\": \"2026-04-29 20:03:14.880\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38470, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 166, \"timestamp\": 1777473204.882105, \"timestamp_iso\": \"2026-04-29T20:03:24.882105\", \"timestamp_human\": \"2026-04-29 20:03:24.882\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38471, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 168, \"timestamp\": 1777473214.891823, \"timestamp_iso\": \"2026-04-29T20:03:34.891823\", \"timestamp_human\": \"2026-04-29 20:03:34.891\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38472, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 170, \"timestamp\": 1777473224.894135, \"timestamp_iso\": \"2026-04-29T20:03:44.894135\", \"timestamp_human\": \"2026-04-29 20:03:44.894\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38473, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 172, \"timestamp\": 1777473234.898346, \"timestamp_iso\": \"2026-04-29T20:03:54.898346\", \"timestamp_human\": \"2026-04-29 20:03:54.898\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38474, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 176, \"timestamp\": 1777473244.906947, \"timestamp_iso\": \"2026-04-29T20:04:04.906947\", \"timestamp_human\": \"2026-04-29 20:04:04.906\", \"size\": 55, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38475, \"ip_len\": 41, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940647, \"tcp_ack\": 1516837734, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\", \"payload_size\": 1, \"payload_preview\": \"00\", \"payload_ascii\": \"\\u0000\"}, {\"packet_number\": 179, \"timestamp\": 1777473249.251779, \"timestamp_iso\": \"2026-04-29T20:04:09.251779\", \"timestamp_human\": \"2026-04-29 20:04:09.251\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38476, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940648, \"tcp_ack\": 1516837735, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 180, \"timestamp\": 1777473249.275904, \"timestamp_iso\": \"2026-04-29T20:04:09.275904\", \"timestamp_human\": \"2026-04-29 20:04:09.275\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38477, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50176, \"dst_port\": 8080, \"tcp_seq\": 275940648, \"tcp_ack\": 1516837735, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 182, \"timestamp\": 1777473249.294562, \"timestamp_iso\": \"2026-04-29T20:04:09.294562\", \"timestamp_human\": \"2026-04-29 20:04:09.294\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38478, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371135995, \"tcp_ack\": 0, \"tcp_window\": 65535, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 184, \"timestamp\": 1777473249.294761, \"timestamp_iso\": \"2026-04-29T20:04:09.294761\", \"timestamp_human\": \"2026-04-29 20:04:09.294\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38479, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371135996, \"tcp_ack\": 17955916, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 193, \"timestamp\": 1777473250.389054, \"timestamp_iso\": \"2026-04-29T20:04:10.389054\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 58, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38480, \"ip_len\": 44, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371135996, \"tcp_ack\": 17955916, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 4, \"payload_preview\": \"9f000000\", \"payload_ascii\": \"\\u0000\\u0000\\u0000\"}, {\"packet_number\": 195, \"timestamp\": 1777473250.389176, \"timestamp_iso\": \"2026-04-29T20:04:10.389176\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 213, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"Raw\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"185.163.204.93\", \"ttl\": 128, \"ip_id\": 38481, \"ip_len\": 199, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50180, \"dst_port\": 8080, \"tcp_seq\": 1371136000, \"tcp_ack\": 17955916, \"tcp_window\": 32768, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 159, \"payload_preview\": \"7b2274797065223a22696e666f222c2264617461223a7b22686f73746e616d65223a224445534b544f502d4a4c4355504b30222c22757365726e616d65223a2230784b616c222c226f73223a224d6963726f736f66742057696e646f77732031302050726f2031302e302e3139303434222c22636f756e747279223a224e4c222c226d6f6e69746f7273223a312c2277616c6c657473223a66616c73657d7d\", \"payload_ascii\": \"{\\\"type\\\":\\\"info\\\",\\\"data\\\":{\\\"hostname\\\":\\\"DESKTOP-JLCUPK0\\\",\\\"username\\\":\\\"0xKal\\\",\\\"os\\\":\\\"Microsoft Windows 10 Pro 10.0.19044\\\",\\\"country\\\":\\\"NL\\\",\\\"monitors\\\":1,\\\"wallets\\\":false}}\"}], \"tcp_flags\": {\"SYN\": 6, \"ACK\": 55, \"PSH\": 15, \"FIN\": 5}, \"packet_sizes\": [66, 54, 58, 58, 101, 62, 172, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213, 55, 55, 55, 55, 55, 55, 54, 54, 66, 54, 58, 213], \"inter_packet_intervals\": [0.00018715858459472656, 0.08157587051391602, 0.0001671314239501953, 0.00013589859008789062, 9.894371032714844e-05, 9.202957153320312e-05, 0.00914311408996582, 0.00041103363037109375, 0.02452683448791504, 0.0001430511474609375, 3.5501461029052734, 0.00012493133544921875, 10.075546026229858, 10.014652013778687, 10.029428005218506, 10.175830841064453, 10.013552188873291, 10.095124006271362, 5.572582006454468, 0.050418853759765625, 0.01822209358215332, 0.00017905235290527344, 0.9227099418640137, 0.0001659393310546875, 10.008105993270874, 10.08997106552124, 10.001863956451416, 10.090625047683716, 10.011833906173706, 10.095060110092163, 3.792090892791748, 0.05630302429199219, 0.026998043060302734, 0.0001590251922607422, 1.2673640251159668, 0.00017786026000976562, 10.088178157806396, 10.002333879470825, 10.012665033340454, 10.003886938095093, 10.0139901638031, 10.01547384262085, 4.59254002571106, 0.024487018585205078, 0.01898789405822754, 0.0001850128173828125, 0.6642770767211914, 0.00012111663818359375, 10.00775694847107, 10.001980066299438, 10.00971794128418, 10.002311944961548, 10.004210948944092, 10.008600950241089, 4.344832181930542, 0.024124860763549805, 0.018658161163330078, 0.00019884109497070312, 1.0942931175231934, 0.00012183189392089844], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 267.02964997291565, \"avg_packet_size\": 71.90163934426229, \"packets_per_second\": 0.2284390516415953, \"bytes_per_second\": 16.425142303279298, \"min_packet_size\": 54, \"max_packet_size\": 213, \"median_packet_size\": 55, \"avg_interval\": 4.450494166215261, \"min_interval\": 9.202957153320312e-05, \"max_interval\": 10.175830841064453}, {\"source\": \"185.163.204.93\", \"target\": \"192.168.122.168\", \"packet_count\": 54, \"total_bytes\": 3276, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ports\": [8080], \"dst_ports\": [50095, 50096, 50144, 50161, 50176, 50180], \"first_packet\": 1777472983.359579, \"last_packet\": 1777473250.389184, \"packets\": [{\"packet_number\": 42, \"timestamp\": 1777472983.441697, \"timestamp_iso\": \"2026-04-29T19:59:43.441697\", \"timestamp_human\": \"2026-04-29 19:59:43.441\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18298, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50095, \"tcp_seq\": 1770832334, \"tcp_ack\": 689988234, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 44, \"timestamp\": 1777472983.44179, \"timestamp_iso\": \"2026-04-29T19:59:43.441790\", \"timestamp_human\": \"2026-04-29 19:59:43.441\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18299, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50095, \"tcp_seq\": 1770832334, \"tcp_ack\": 689988352, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 46, \"timestamp\": 1777472983.451014, \"timestamp_iso\": \"2026-04-29T19:59:43.451014\", \"timestamp_human\": \"2026-04-29 19:59:43.451\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 18300, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50095, \"tcp_seq\": 1770832334, \"tcp_ack\": 689988353, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 49, \"timestamp\": 1777472983.475909, \"timestamp_iso\": \"2026-04-29T19:59:43.475909\", \"timestamp_human\": \"2026-04-29 19:59:43.475\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942179, \"tcp_ack\": 1897488115, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 59, \"timestamp\": 1777472987.026196, \"timestamp_iso\": \"2026-04-29T19:59:47.026196\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38744, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488119, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 61, \"timestamp\": 1777472987.026286, \"timestamp_iso\": \"2026-04-29T19:59:47.026286\", \"timestamp_human\": \"2026-04-29 19:59:47.026\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38745, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 63, \"timestamp\": 1777472997.101853, \"timestamp_iso\": \"2026-04-29T19:59:57.101853\", \"timestamp_human\": \"2026-04-29 19:59:57.101\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38746, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 65, \"timestamp\": 1777473007.116552, \"timestamp_iso\": \"2026-04-29T20:00:07.116552\", \"timestamp_human\": \"2026-04-29 20:00:07.116\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38747, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 67, \"timestamp\": 1777473017.145962, \"timestamp_iso\": \"2026-04-29T20:00:17.145962\", \"timestamp_human\": \"2026-04-29 20:00:17.145\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38748, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 71, \"timestamp\": 1777473027.32177, \"timestamp_iso\": \"2026-04-29T20:00:27.321770\", \"timestamp_human\": \"2026-04-29 20:00:27.321\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38749, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 73, \"timestamp\": 1777473037.335338, \"timestamp_iso\": \"2026-04-29T20:00:37.335338\", \"timestamp_human\": \"2026-04-29 20:00:37.335\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38750, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 75, \"timestamp\": 1777473047.430447, \"timestamp_iso\": \"2026-04-29T20:00:47.430447\", \"timestamp_human\": \"2026-04-29 20:00:47.430\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38751, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 76, \"timestamp\": 1777473053.002744, \"timestamp_iso\": \"2026-04-29T20:00:53.002744\", \"timestamp_human\": \"2026-04-29 20:00:53.002\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 38752, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942180, \"tcp_ack\": 1897488278, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 79, \"timestamp\": 1777473053.053462, \"timestamp_iso\": \"2026-04-29T20:00:53.053462\", \"timestamp_human\": \"2026-04-29 20:00:53.053\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50096, \"tcp_seq\": 747942181, \"tcp_ack\": 1897488279, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 81, \"timestamp\": 1777473053.071706, \"timestamp_iso\": \"2026-04-29T20:00:53.071706\", \"timestamp_human\": \"2026-04-29 20:00:53.071\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233061, \"tcp_ack\": 1125558934, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 92, \"timestamp\": 1777473053.994591, \"timestamp_iso\": \"2026-04-29T20:00:53.994591\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43358, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125558938, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 94, \"timestamp\": 1777473053.994701, \"timestamp_iso\": \"2026-04-29T20:00:53.994701\", \"timestamp_human\": \"2026-04-29 20:00:53.994\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43359, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 97, \"timestamp\": 1777473064.002844, \"timestamp_iso\": \"2026-04-29T20:01:04.002844\", \"timestamp_human\": \"2026-04-29 20:01:04.002\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43360, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 99, \"timestamp\": 1777473074.09281, \"timestamp_iso\": \"2026-04-29T20:01:14.092810\", \"timestamp_human\": \"2026-04-29 20:01:14.092\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43361, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 101, \"timestamp\": 1777473084.094691, \"timestamp_iso\": \"2026-04-29T20:01:24.094691\", \"timestamp_human\": \"2026-04-29 20:01:24.094\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43362, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 103, \"timestamp\": 1777473094.185298, \"timestamp_iso\": \"2026-04-29T20:01:34.185298\", \"timestamp_human\": \"2026-04-29 20:01:34.185\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43363, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 105, \"timestamp\": 1777473104.19712, \"timestamp_iso\": \"2026-04-29T20:01:44.197120\", \"timestamp_human\": \"2026-04-29 20:01:44.197\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43364, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 109, \"timestamp\": 1777473114.292182, \"timestamp_iso\": \"2026-04-29T20:01:54.292182\", \"timestamp_human\": \"2026-04-29 20:01:54.292\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43365, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 110, \"timestamp\": 1777473118.084023, \"timestamp_iso\": \"2026-04-29T20:01:58.084023\", \"timestamp_human\": \"2026-04-29 20:01:58.084\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 43366, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233062, \"tcp_ack\": 1125559097, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 113, \"timestamp\": 1777473118.140578, \"timestamp_iso\": \"2026-04-29T20:01:58.140578\", \"timestamp_human\": \"2026-04-29 20:01:58.140\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50144, \"tcp_seq\": 2135233063, \"tcp_ack\": 1125559098, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 115, \"timestamp\": 1777473118.167587, \"timestamp_iso\": \"2026-04-29T20:01:58.167587\", \"timestamp_human\": \"2026-04-29 20:01:58.167\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973462, \"tcp_ack\": 2775483792, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 126, \"timestamp\": 1777473119.435096, \"timestamp_iso\": \"2026-04-29T20:01:59.435096\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36940, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483796, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 128, \"timestamp\": 1777473119.435252, \"timestamp_iso\": \"2026-04-29T20:01:59.435252\", \"timestamp_human\": \"2026-04-29 20:01:59.435\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36941, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 131, \"timestamp\": 1777473129.523454, \"timestamp_iso\": \"2026-04-29T20:02:09.523454\", \"timestamp_human\": \"2026-04-29 20:02:09.523\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36942, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 133, \"timestamp\": 1777473139.525796, \"timestamp_iso\": \"2026-04-29T20:02:19.525796\", \"timestamp_human\": \"2026-04-29 20:02:19.525\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36943, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 135, \"timestamp\": 1777473149.538471, \"timestamp_iso\": \"2026-04-29T20:02:29.538471\", \"timestamp_human\": \"2026-04-29 20:02:29.538\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36944, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 137, \"timestamp\": 1777473159.542328, \"timestamp_iso\": \"2026-04-29T20:02:39.542328\", \"timestamp_human\": \"2026-04-29 20:02:39.542\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36945, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 141, \"timestamp\": 1777473169.556331, \"timestamp_iso\": \"2026-04-29T20:02:49.556331\", \"timestamp_human\": \"2026-04-29 20:02:49.556\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36946, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 143, \"timestamp\": 1777473179.571812, \"timestamp_iso\": \"2026-04-29T20:02:59.571812\", \"timestamp_human\": \"2026-04-29 20:02:59.571\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36947, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 144, \"timestamp\": 1777473184.163963, \"timestamp_iso\": \"2026-04-29T20:03:04.163963\", \"timestamp_human\": \"2026-04-29 20:03:04.163\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 36948, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973463, \"tcp_ack\": 2775483955, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 147, \"timestamp\": 1777473184.188821, \"timestamp_iso\": \"2026-04-29T20:03:04.188821\", \"timestamp_human\": \"2026-04-29 20:03:04.188\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50161, \"tcp_seq\": 199973464, \"tcp_ack\": 2775483956, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 149, \"timestamp\": 1777473184.207833, \"timestamp_iso\": \"2026-04-29T20:03:04.207833\", \"timestamp_human\": \"2026-04-29 20:03:04.207\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837733, \"tcp_ack\": 275940485, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 160, \"timestamp\": 1777473184.872277, \"timestamp_iso\": \"2026-04-29T20:03:04.872277\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22642, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940489, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 162, \"timestamp\": 1777473184.872375, \"timestamp_iso\": \"2026-04-29T20:03:04.872375\", \"timestamp_human\": \"2026-04-29 20:03:04.872\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22643, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 165, \"timestamp\": 1777473194.880161, \"timestamp_iso\": \"2026-04-29T20:03:14.880161\", \"timestamp_human\": \"2026-04-29 20:03:14.880\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22644, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 167, \"timestamp\": 1777473204.882137, \"timestamp_iso\": \"2026-04-29T20:03:24.882137\", \"timestamp_human\": \"2026-04-29 20:03:24.882\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22645, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 169, \"timestamp\": 1777473214.891854, \"timestamp_iso\": \"2026-04-29T20:03:34.891854\", \"timestamp_human\": \"2026-04-29 20:03:34.891\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22646, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 171, \"timestamp\": 1777473224.894165, \"timestamp_iso\": \"2026-04-29T20:03:44.894165\", \"timestamp_human\": \"2026-04-29 20:03:44.894\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22647, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 173, \"timestamp\": 1777473234.898374, \"timestamp_iso\": \"2026-04-29T20:03:54.898374\", \"timestamp_human\": \"2026-04-29 20:03:54.898\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22648, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 177, \"timestamp\": 1777473244.906977, \"timestamp_iso\": \"2026-04-29T20:04:04.906977\", \"timestamp_human\": \"2026-04-29 20:04:04.906\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22649, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 178, \"timestamp\": 1777473249.251587, \"timestamp_iso\": \"2026-04-29T20:04:09.251587\", \"timestamp_human\": \"2026-04-29 20:04:09.251\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 22650, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837734, \"tcp_ack\": 275940648, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 181, \"timestamp\": 1777473249.275935, \"timestamp_iso\": \"2026-04-29T20:04:09.275935\", \"timestamp_human\": \"2026-04-29 20:04:09.275\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50176, \"tcp_seq\": 1516837735, \"tcp_ack\": 275940649, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 183, \"timestamp\": 1777473249.294615, \"timestamp_iso\": \"2026-04-29T20:04:09.294615\", \"timestamp_human\": \"2026-04-29 20:04:09.294\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50180, \"tcp_seq\": 17955915, \"tcp_ack\": 1371135996, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 194, \"timestamp\": 1777473250.389085, \"timestamp_iso\": \"2026-04-29T20:04:10.389085\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 40659, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50180, \"tcp_seq\": 17955916, \"tcp_ack\": 1371136000, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 196, \"timestamp\": 1777473250.389184, \"timestamp_iso\": \"2026-04-29T20:04:10.389184\", \"timestamp_human\": \"2026-04-29 20:04:10.389\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"185.163.204.93\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 40660, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 8080, \"dst_port\": 50180, \"tcp_seq\": 17955916, \"tcp_ack\": 1371136159, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 6, \"ACK\": 54, \"FIN\": 5}, \"packet_sizes\": [66, 54, 54, 54, 54, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54, 66, 66, 66, 66, 66, 66, 54, 54, 66, 54, 54], \"inter_packet_intervals\": [0.0817408561706543, 0.00014901161193847656, 0.00013113021850585938, 9.679794311523438e-05, 9.322166442871094e-05, 0.00922393798828125, 0.02489495277404785, 3.5502870082855225, 8.988380432128906e-05, 10.07556700706482, 10.014699220657349, 10.029409885406494, 10.17580795288086, 10.01356816291809, 10.095108985900879, 5.572296857833862, 0.050718069076538086, 0.018244028091430664, 0.9228849411010742, 0.00010991096496582031, 10.008143186569214, 10.0899658203125, 10.001881122589111, 10.090606927871704, 10.011821985244751, 10.095062017440796, 3.7918410301208496, 0.05655503273010254, 0.027009010314941406, 1.2675089836120605, 0.00015592575073242188, 10.088201999664307, 10.002341985702515, 10.012675046920776, 10.003856897354126, 10.014003038406372, 10.015480995178223, 4.592151165008545, 0.02485799789428711, 0.019011974334716797, 0.6644439697265625, 9.799003601074219e-05, 10.00778603553772, 10.001976013183594, 10.009716987609863, 10.002310991287231, 10.004209041595459, 10.008602857589722, 4.344609975814819, 0.024348020553588867, 0.018680095672607422, 1.0944700241088867, 9.894371032714844e-05], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 267.0296049118042, \"avg_packet_size\": 60.666666666666664, \"packets_per_second\": 0.2022247683654229, \"bytes_per_second\": 12.26830261416899, \"min_packet_size\": 54, \"max_packet_size\": 66, \"median_packet_size\": 66, \"avg_interval\": 5.038294432298192, \"min_interval\": 8.988380432128906e-05, \"max_interval\": 10.17580795288086}, {\"source\": \"192.168.122.168\", \"target\": \"208.95.112.1\", \"packet_count\": 28, \"total_bytes\": 2021, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ports\": [50101, 50145, 50162, 50177, 50181], \"dst_ports\": [80], \"first_packet\": 1777472986.434403, \"last_packet\": 1777473250.438023, \"packets\": [{\"packet_number\": 51, \"timestamp\": 1777472986.434403, \"timestamp_iso\": \"2026-04-29T19:59:46.434403\", \"timestamp_human\": \"2026-04-29 19:59:46.434\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1757, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520094, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 53, \"timestamp\": 1777472986.434692, \"timestamp_iso\": \"2026-04-29T19:59:46.434692\", \"timestamp_human\": \"2026-04-29 19:59:46.434\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1758, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520095, \"tcp_ack\": 2612282430, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 54, \"timestamp\": 1777472986.439405, \"timestamp_iso\": \"2026-04-29T19:59:46.439405\", \"timestamp_human\": \"2026-04-29 19:59:46.439\", \"size\": 163, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1759, \"ip_len\": 149, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520095, \"tcp_ack\": 2612282430, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 57, \"timestamp\": 1777472987.011083, \"timestamp_iso\": \"2026-04-29T19:59:47.011083\", \"timestamp_human\": \"2026-04-29 19:59:47.011\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1760, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520204, \"tcp_ack\": 2612282626, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 69, \"timestamp\": 1777473021.344924, \"timestamp_iso\": \"2026-04-29T20:00:21.344924\", \"timestamp_human\": \"2026-04-29 20:00:21.344\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1761, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520204, \"tcp_ack\": 2612282627, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 83, \"timestamp\": 1777473053.63862, \"timestamp_iso\": \"2026-04-29T20:00:53.638620\", \"timestamp_human\": \"2026-04-29 20:00:53.638\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1762, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50101, \"dst_port\": 80, \"tcp_seq\": 416520204, \"tcp_ack\": 2612282627, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 85, \"timestamp\": 1777473053.640511, \"timestamp_iso\": \"2026-04-29T20:00:53.640511\", \"timestamp_human\": \"2026-04-29 20:00:53.640\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1763, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256111, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 87, \"timestamp\": 1777473053.640649, \"timestamp_iso\": \"2026-04-29T20:00:53.640649\", \"timestamp_human\": \"2026-04-29 20:00:53.640\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1764, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256112, \"tcp_ack\": 3425078173, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 88, \"timestamp\": 1777473053.641256, \"timestamp_iso\": \"2026-04-29T20:00:53.641256\", \"timestamp_human\": \"2026-04-29 20:00:53.641\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1765, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256112, \"tcp_ack\": 3425078173, \"tcp_window\": 1026, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 95, \"timestamp\": 1777473054.034127, \"timestamp_iso\": \"2026-04-29T20:00:54.034127\", \"timestamp_human\": \"2026-04-29 20:00:54.034\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1766, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256197, \"tcp_ack\": 3425078368, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 107, \"timestamp\": 1777473107.033208, \"timestamp_iso\": \"2026-04-29T20:01:47.033208\", \"timestamp_human\": \"2026-04-29 20:01:47.033\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1767, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256197, \"tcp_ack\": 3425078369, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 117, \"timestamp\": 1777473118.401279, \"timestamp_iso\": \"2026-04-29T20:01:58.401279\", \"timestamp_human\": \"2026-04-29 20:01:58.401\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1768, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50145, \"dst_port\": 80, \"tcp_seq\": 1823256197, \"tcp_ack\": 3425078369, \"tcp_window\": 1025, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 119, \"timestamp\": 1777473118.657902, \"timestamp_iso\": \"2026-04-29T20:01:58.657902\", \"timestamp_human\": \"2026-04-29 20:01:58.657\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1769, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682245, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 121, \"timestamp\": 1777473118.658083, \"timestamp_iso\": \"2026-04-29T20:01:58.658083\", \"timestamp_human\": \"2026-04-29 20:01:58.658\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1770, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682246, \"tcp_ack\": 527920617, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 122, \"timestamp\": 1777473118.658254, \"timestamp_iso\": \"2026-04-29T20:01:58.658254\", \"timestamp_human\": \"2026-04-29 20:01:58.658\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1771, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682246, \"tcp_ack\": 527920617, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 129, \"timestamp\": 1777473119.523634, \"timestamp_iso\": \"2026-04-29T20:01:59.523634\", \"timestamp_human\": \"2026-04-29 20:01:59.523\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1772, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682331, \"tcp_ack\": 527920813, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 139, \"timestamp\": 1777473160.343861, \"timestamp_iso\": \"2026-04-29T20:02:40.343861\", \"timestamp_human\": \"2026-04-29 20:02:40.343\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1773, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682331, \"tcp_ack\": 527920814, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 151, \"timestamp\": 1777473184.428378, \"timestamp_iso\": \"2026-04-29T20:03:04.428378\", \"timestamp_human\": \"2026-04-29 20:03:04.428\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1774, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50162, \"dst_port\": 80, \"tcp_seq\": 3346682331, \"tcp_ack\": 527920814, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 153, \"timestamp\": 1777473184.429139, \"timestamp_iso\": \"2026-04-29T20:03:04.429139\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1775, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458143, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 155, \"timestamp\": 1777473184.429258, \"timestamp_iso\": \"2026-04-29T20:03:04.429258\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1776, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458144, \"tcp_ack\": 2184589068, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 156, \"timestamp\": 1777473184.429573, \"timestamp_iso\": \"2026-04-29T20:03:04.429573\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1777, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458144, \"tcp_ack\": 2184589068, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 163, \"timestamp\": 1777473184.920066, \"timestamp_iso\": \"2026-04-29T20:03:04.920066\", \"timestamp_human\": \"2026-04-29 20:03:04.920\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1778, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458229, \"tcp_ack\": 2184589264, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 175, \"timestamp\": 1777473238.211946, \"timestamp_iso\": \"2026-04-29T20:03:58.211946\", \"timestamp_human\": \"2026-04-29 20:03:58.211\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1779, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458229, \"tcp_ack\": 2184589265, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 185, \"timestamp\": 1777473249.521297, \"timestamp_iso\": \"2026-04-29T20:04:09.521297\", \"timestamp_human\": \"2026-04-29 20:04:09.521\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1780, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50177, \"dst_port\": 80, \"tcp_seq\": 3658458229, \"tcp_ack\": 2184589265, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 187, \"timestamp\": 1777473249.802086, \"timestamp_iso\": \"2026-04-29T20:04:09.802086\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1781, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268526, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 189, \"timestamp\": 1777473249.802235, \"timestamp_iso\": \"2026-04-29T20:04:09.802235\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1782, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268527, \"tcp_ack\": 3563670001, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 190, \"timestamp\": 1777473249.802516, \"timestamp_iso\": \"2026-04-29T20:04:09.802516\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 139, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPRequest\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1783, \"ip_len\": 125, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268527, \"tcp_ack\": 3563670001, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 197, \"timestamp\": 1777473250.438023, \"timestamp_iso\": \"2026-04-29T20:04:10.438023\", \"timestamp_human\": \"2026-04-29 20:04:10.438\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"208.95.112.1\", \"ttl\": 128, \"ip_id\": 1784, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 50181, \"dst_port\": 80, \"tcp_seq\": 961268612, \"tcp_ack\": 3563670197, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 5, \"ACK\": 23, \"PSH\": 5, \"FIN\": 4}, \"packet_sizes\": [66, 54, 163, 54, 54, 54, 66, 54, 139, 54, 54, 54, 66, 54, 139, 54, 54, 54, 66, 54, 139, 54, 54, 54, 66, 54, 139, 54], \"inter_packet_intervals\": [0.00028896331787109375, 0.0047130584716796875, 0.5716779232025146, 34.33384108543396, 32.29369592666626, 0.0018911361694335938, 0.0001380443572998047, 0.0006070137023925781, 0.3928709030151367, 52.99908089637756, 11.36807107925415, 0.2566230297088623, 0.00018095970153808594, 0.0001709461212158203, 0.865380048751831, 40.82022714614868, 24.084517002105713, 0.0007607936859130859, 0.00011920928955078125, 0.00031495094299316406, 0.4904930591583252, 53.29187989234924, 11.309350967407227, 0.2807891368865967, 0.000148773193359375, 0.0002810955047607422, 0.6355071067810059], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 264.0036201477051, \"avg_packet_size\": 72.17857142857143, \"packets_per_second\": 0.1060591517053233, \"bytes_per_second\": 7.655198057016371, \"min_packet_size\": 54, \"max_packet_size\": 163, \"median_packet_size\": 54, \"avg_interval\": 9.77791185732241, \"min_interval\": 0.00011920928955078125, \"max_interval\": 53.29187989234924}, {\"source\": \"208.95.112.1\", \"target\": \"192.168.122.168\", \"packet_count\": 23, \"total_bytes\": 2281, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ports\": [80], \"dst_ports\": [50101, 50145, 50162, 50177, 50181], \"first_packet\": 1777472986.434474, \"last_packet\": 1777473250.386889, \"packets\": [{\"packet_number\": 52, \"timestamp\": 1777472986.434474, \"timestamp_iso\": \"2026-04-29T19:59:46.434474\", \"timestamp_human\": \"2026-04-29 19:59:46.434\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282429, \"tcp_ack\": 416520095, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 55, \"timestamp\": 1777472986.439427, \"timestamp_iso\": \"2026-04-29T19:59:46.439427\", \"timestamp_human\": \"2026-04-29 19:59:46.439\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11501, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282430, \"tcp_ack\": 416520204, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 56, \"timestamp\": 1777472986.967336, \"timestamp_iso\": \"2026-04-29T19:59:46.967336\", \"timestamp_human\": \"2026-04-29 19:59:46.967\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11502, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282430, \"tcp_ack\": 416520204, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}, {\"packet_number\": 68, \"timestamp\": 1777473021.344763, \"timestamp_iso\": \"2026-04-29T20:00:21.344763\", \"timestamp_human\": \"2026-04-29 20:00:21.344\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 11503, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282626, \"tcp_ack\": 416520204, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 84, \"timestamp\": 1777473053.638683, \"timestamp_iso\": \"2026-04-29T20:00:53.638683\", \"timestamp_human\": \"2026-04-29 20:00:53.638\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50101, \"tcp_seq\": 2612282627, \"tcp_ack\": 416520205, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 86, \"timestamp\": 1777473053.64057, \"timestamp_iso\": \"2026-04-29T20:00:53.640570\", \"timestamp_human\": \"2026-04-29 20:00:53.640\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078172, \"tcp_ack\": 1823256112, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 89, \"timestamp\": 1777473053.641276, \"timestamp_iso\": \"2026-04-29T20:00:53.641276\", \"timestamp_human\": \"2026-04-29 20:00:53.641\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 56047, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078173, \"tcp_ack\": 1823256197, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 90, \"timestamp\": 1777473053.992047, \"timestamp_iso\": \"2026-04-29T20:00:53.992047\", \"timestamp_human\": \"2026-04-29 20:00:53.992\", \"size\": 249, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 56048, \"ip_len\": 235, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078173, \"tcp_ack\": 1823256197, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}, {\"packet_number\": 106, \"timestamp\": 1777473107.033002, \"timestamp_iso\": \"2026-04-29T20:01:47.033002\", \"timestamp_human\": \"2026-04-29 20:01:47.033\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 56049, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078368, \"tcp_ack\": 1823256197, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 118, \"timestamp\": 1777473118.401311, \"timestamp_iso\": \"2026-04-29T20:01:58.401311\", \"timestamp_human\": \"2026-04-29 20:01:58.401\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50145, \"tcp_seq\": 3425078369, \"tcp_ack\": 1823256198, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 120, \"timestamp\": 1777473118.657953, \"timestamp_iso\": \"2026-04-29T20:01:58.657953\", \"timestamp_human\": \"2026-04-29 20:01:58.657\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920616, \"tcp_ack\": 3346682246, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 123, \"timestamp\": 1777473118.658269, \"timestamp_iso\": \"2026-04-29T20:01:58.658269\", \"timestamp_human\": \"2026-04-29 20:01:58.658\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 55170, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920617, \"tcp_ack\": 3346682331, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 124, \"timestamp\": 1777473119.4331, \"timestamp_iso\": \"2026-04-29T20:01:59.433100\", \"timestamp_human\": \"2026-04-29 20:01:59.433\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 55171, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920617, \"tcp_ack\": 3346682331, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a225553227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"US\\\"}\"}, {\"packet_number\": 138, \"timestamp\": 1777473160.343693, \"timestamp_iso\": \"2026-04-29T20:02:40.343693\", \"timestamp_human\": \"2026-04-29 20:02:40.343\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 55172, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920813, \"tcp_ack\": 3346682331, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 152, \"timestamp\": 1777473184.428419, \"timestamp_iso\": \"2026-04-29T20:03:04.428419\", \"timestamp_human\": \"2026-04-29 20:03:04.428\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50162, \"tcp_seq\": 527920814, \"tcp_ack\": 3346682332, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 154, \"timestamp\": 1777473184.429178, \"timestamp_iso\": \"2026-04-29T20:03:04.429178\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589067, \"tcp_ack\": 3658458144, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 157, \"timestamp\": 1777473184.429588, \"timestamp_iso\": \"2026-04-29T20:03:04.429588\", \"timestamp_human\": \"2026-04-29 20:03:04.429\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 58992, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589068, \"tcp_ack\": 3658458229, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 158, \"timestamp\": 1777473184.87021, \"timestamp_iso\": \"2026-04-29T20:03:04.870210\", \"timestamp_human\": \"2026-04-29 20:03:04.870\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 58993, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589068, \"tcp_ack\": 3658458229, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}, {\"packet_number\": 174, \"timestamp\": 1777473238.211732, \"timestamp_iso\": \"2026-04-29T20:03:58.211732\", \"timestamp_human\": \"2026-04-29 20:03:58.211\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 58994, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589264, \"tcp_ack\": 3658458229, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 186, \"timestamp\": 1777473249.52133, \"timestamp_iso\": \"2026-04-29T20:04:09.521330\", \"timestamp_human\": \"2026-04-29 20:04:09.521\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50177, \"tcp_seq\": 2184589265, \"tcp_ack\": 3658458230, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 188, \"timestamp\": 1777473249.802133, \"timestamp_iso\": \"2026-04-29T20:04:09.802133\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50181, \"tcp_seq\": 3563670000, \"tcp_ack\": 961268527, \"tcp_window\": 42340, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 191, \"timestamp\": 1777473249.802533, \"timestamp_iso\": \"2026-04-29T20:04:09.802533\", \"timestamp_human\": \"2026-04-29 20:04:09.802\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 25674, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50181, \"tcp_seq\": 3563670001, \"tcp_ack\": 961268612, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 192, \"timestamp\": 1777473250.386889, \"timestamp_iso\": \"2026-04-29T20:04:10.386889\", \"timestamp_human\": \"2026-04-29 20:04:10.386\", \"size\": 250, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"HTTP\", \"HTTPResponse\", \"Raw\"], \"src_ip\": \"208.95.112.1\", \"dst_ip\": \"192.168.122.168\", \"ttl\": 64, \"ip_id\": 25675, \"ip_len\": 236, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 80, \"dst_port\": 50181, \"tcp_seq\": 3563670001, \"tcp_ack\": 961268612, \"tcp_window\": 83, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 20, \"payload_preview\": \"7b22636f756e747279436f6465223a224e4c227d\", \"payload_ascii\": \"{\\\"countryCode\\\":\\\"NL\\\"}\"}], \"tcp_flags\": {\"SYN\": 5, \"ACK\": 23, \"PSH\": 5, \"FIN\": 4}, \"packet_sizes\": [66, 54, 250, 54, 54, 66, 54, 249, 54, 54, 66, 54, 250, 54, 54, 66, 54, 250, 54, 54, 66, 54, 250], \"inter_packet_intervals\": [0.004952907562255859, 0.5279090404510498, 34.377427101135254, 32.293920040130615, 0.0018868446350097656, 0.0007059574127197266, 0.3507711887359619, 53.04095482826233, 11.368309020996094, 0.25664210319519043, 0.0003159046173095703, 0.7748310565948486, 40.910593032836914, 24.084726095199585, 0.0007588863372802734, 0.0004100799560546875, 0.44062185287475586, 53.341521978378296, 11.309598207473755, 0.28080296516418457, 0.0003998279571533203, 0.5843560695648193], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 263.95241498947144, \"avg_packet_size\": 99.17391304347827, \"packets_per_second\": 0.08713691822413304, \"bytes_per_second\": 8.641709150836846, \"min_packet_size\": 54, \"max_packet_size\": 250, \"median_packet_size\": 54, \"avg_interval\": 11.997837044975974, \"min_interval\": 0.0003159046173095703, \"max_interval\": 53.341521978378296}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"69f2532259a6632dae07de84"},"sha256":"4792cd702b952d39c1cd215f842223b96e2c17ce9981629cce63014bf095329e","timestamp":{"$date":"2026-04-30T00:21:14.284Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_k06rf0y2.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #1\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #2\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #3\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #4\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #5\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #6\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #7\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49899 -> 4.213.25.240:443 [AP] #8\n....^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #9\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #10\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #11\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #12\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #13\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n##\nT 192.168.122.168:49892 -> 4.213.25.240:443 [AP] #15\n...................t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp...M.i.'.....\\4-....).E...v..._.^.,.a..1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%......~@/.1.....i7.^n.0.#....h\n#exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpk0lq2e1u/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-04-30T00:21:10.163754,Tool:tmpk0lq2e1u/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpk0lq2e1u/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-04-30T00:21:10.168265,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpk0lq2e1u/carved/scalpel/audit.txt,468,518356d9e441f4710189ddf7850c3dea,c59a2471e3317a8f2025c7131964255b98e1370cf29dc77352d430b50a4b70ac,4.95,\"Scalpel version 1.60 audit file, Started at Thu Apr 30 00:21:10 2026, Command line:, scalpel -c /tmp/tmpk0lq2e1u/carved/scalpel.conf /tmp/filtered_k06rf0y2.pcap -o /tmp/tmpk0lq2e1u/carved/scalpel , Output directory: /tmp/tmpk0lq2e1u/carved/scalpel, Configuration file: /tmp/tmpk0lq2e1u/carved/scalpel.conf, Opening target , /tmp/filtered_k06rf0y2.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Thu Apr 30 00:21:10 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a\n2026-04-30T00:21:10.161689,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpk0lq2e1u/carved/foremost/audit.txt,698,96b211fc4117dd9fcd05c9a5f434f275,23598b9fc1ff3b14bf0bcc70ac3a7a098bd5cac8796860e04fd5a34a99ea3515,4.84,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Thu Apr 30 00:21:10 2026, Invocation: foremost -t all -i /tmp/filtered_k06rf0y2.pcap -o /tmp/tmpk0lq2e1u/carved/foremost , Output directory: /tmp/tmpk0lq2e1u/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_k06rf0y2.pcap, Start: Thu Apr 30 00:21:10 2026, Length: 3 KB (3820 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Thu Apr 30 00:21:10 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Thu Apr 30 00:21:10 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 6b 30 6c 71 32 65 31 75 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 6b 30 36 72 66 30 79 32 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 33 20 4b 42 20 28 33 38 32 30 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 54 68 75 20 41 70 72 20 33 30 20 30 30 3a 32 31 3a 31 30 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,16,3138,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n443,16,3138,50.00%,50.00%\n49899,9,1278,28.12%,20.36%\n49892,7,1860,21.88%,29.64%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-04-29 15:13:19.749145,1,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fd40008006e959c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....Y..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46845, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59737, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:20.054794,2,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6fe40008006e958c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....X..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46846, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59736, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:20.664177,3,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb6ff40008006e957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46847, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59735, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:21.867300,4,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb700000080062957c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)W..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46848, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10583, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:23.070404,5,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb701000080062956c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.........)V..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46849, \"\"flags\"\": \"\"\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 10582, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:24.273504,6,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70240008006e954c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....T..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46850, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59732, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:26.679735,7,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70340008006e953c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....S..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46851, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59731, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:31.492126,8,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3881783804 Ack=1692602478,525400577f945254007bb79208004500008bb70440008006e952c0a87aa804d519f0c2eb01bbe75f51fc64e3106e501804055a930000170303005e0000000000000007b53f31508341fcdc28be147f2c7379aea49a21a6e7b2682de408581817ae4a3bb6c743daed53db5b255727366006505c06871f13a980c735cafc54b5ddac2fdb1fadb6e73a0afcfb0ca4e560fa9347b507841401ca5c,\"RT.W..RT.{....E.....@....R..z.........._Q.d..nP...Z.......^.........?1P.A..(...,sy...!...h-..X...J;..C..S.[%W'6`.P\\.......5..T.../.....:\n.....`..G......\\\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 139, \"\"id\"\": 46852, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59730, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783804, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1029, \"\"chksum\"\": 23187, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 94, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x07\\\\xb5?1P\\\\x83A\\\\xfc\\\\xdc(\\\\xbe\\\\x14\\\\x7f,sy\\\\xae\\\\xa4\\\\x9a!\\\\xa6\\\\xe7\\\\xb2h-\\\\xe4\\\\x08X\\\\x18\\\\x17\\\\xaeJ;\\\\xb6\\\\xc7C\\\\xda\\\\xedS\\\\xdb[%W'6`\\\\x06P\\\\\\\\\\\\x06\\\\x87\\\\x1f\\\\x13\\\\xa9\\\\x80\\\\xc75\\\\xca\\\\xfcT\\\\xb5\\\\xdd\\\\xac/\\\\xdb\\\\x1f\\\\xad\\\\xb6\\\\xe7:\\\\n\\\\xfc\\\\xfb\\\\x0c\\\\xa4\\\\xe5`\\\\xfa\\\\x93G\\\\xb5\\\\x07\\\\x84\\\\x14\\\\x01\\\\xca\\\\\\\\\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:33.806131,9,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb70540008006e8bdc0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695946107f27325b3d0a3d453ab606439f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78a8b6937e45e6eea30bc238b0ee2fc68,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46853, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59581, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:34.116976,10,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46854, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59580, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:34.726326,11,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46855, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59579, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:35.929634,12,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb70840008006e8bac0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695946107f27325b3d0a3d453ab606439f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78a8b6937e45e6eea30bc238b0ee2fc68,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46856, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59578, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:38.330775,13,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,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,\"RT.W..RT.{....E....\t@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46857, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59577, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:41.289985,14,TCP 192.168.122.168:49899 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49899,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3881783903 Ack=1692602478,525400577f945254007bb792080045000028b70a40008006e9afc0a87aa804d519f0c2eb01bbe75f525f64e3106e501400005a300000,\"RT.W..RT.{....E..(.\n@.......z.........._R_d..nP...Z0..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46858, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59823, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49899, \"\"dport\"\": 443, \"\"seq\"\": 3881783903, \"\"ack\"\": 1692602478, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-04-29 15:13:43.140551,15,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3334411157 Ack=1369756557,525400577f945254007bb79208004500011fb70b40008006e8b7c0a87aa804d519f0c2e401bbc6bf139551a4d38d501804045b27000017030300f20000000000000009b6181eed91be740eaba4bf0aeb2569c3b7985720e33bf754bd78109fd5c6d9a1c834fc1b078e2ee824ed03ce36c87b082e68e9c031b2e00ef7ce30f68695946107f27325b3d0a3d453ab606439f930cf88900a96557174d5bf5170d1e5094dcb69f3271307f216845c342d9c94c10f298f4514b20f76c4d1f45fa35ec52c8b61099131d7768f323efdbe05617a0316fc64c4b9c4c37e9c4e2c14d5cf5b77df06526bf2f199a229db5056828e47304d86e3ad2f94009d0af9c838a352b33ba63665e5c1c726bf6a44aee86f25a10992cfb4c27e402fb53198e5a78a8b6937e45e6eea30bc238b0ee2fc68,\"RT.W..RT.{....E.....@.......z.............Q...P...['..............\t......t....\n.%i...W .;.T.x.......4......$...6.{..h..1.....0....a..s%....S.`d9.0...\n.Uqt..Qp..\tM.i.'.....\\4-....).E...v..._.^.,.a\t.1.v.2>...az...d....~.N,...[w..Rk....).PV..G0M.../...\n..8.R.;.6e...&.jD..o%.\t....~@/.1.....i7.^n.0.#....h\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 287, \"\"id\"\": 46859, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59575, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411157, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 1028, \"\"chksum\"\": 23335, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 242, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b\\\"\"\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\t\\\\xb6\\\\x18\\\\x1e\\\\xed\\\\x91\\\\xbet\\\\x0e\\\\xab\\\\xa4\\\\xbf\\\\n\\\\xeb%i\\\\xc3\\\\xb7\\\\x98W \\\\xe3;\\\\xf7T\\\\xbdx\\\\x10\\\\x9f\\\\xd5\\\\xc6\\\\xd9\\\\xa1\\\\xc84\\\\xfc\\\\x1b\\\\x07\\\\x8e.\\\\xe8$\\\\xed\\\\x03\\\\xce6\\\\xc8{\\\\x08.h\\\\xe9\\\\xc01\\\\xb2\\\\xe0\\\\x0e\\\\xf7\\\\xce0\\\\xf6\\\\x86\\\\x95\\\\x94a\\\\x07\\\\xf2s%\\\\xb3\\\\xd0\\\\xa3\\\\xd4S\\\\xab`d9\\\\xf90\\\\xcf\\\\x88\\\\x90\\\\n\\\\x96Uqt\\\\xd5\\\\xbfQp\\\\xd1\\\\xe5\\\\tM\\\\xcbi\\\\xf3'\\\\x13\\\\x07\\\\xf2\\\\x16\\\\x84\\\\\\\\4-\\\\x9c\\\\x94\\\\xc1\\\\x0f)\\\\x8fE\\\\x14\\\\xb2\\\\x0fv\\\\xc4\\\\xd1\\\\xf4_\\\\xa3^\\\\xc5,\\\\x8ba\\\\t\\\\x911\\\\xd7v\\\\x8f2>\\\\xfd\\\\xbe\\\\x05az\\\\x03\\\\x16\\\\xfcd\\\\xc4\\\\xb9\\\\xc4\\\\xc3~\\\\x9cN,\\\\x14\\\\xd5\\\\xcf[w\\\\xdf\\\\x06Rk\\\\xf2\\\\xf1\\\\x99\\\\xa2)\\\\xdbPV\\\\x82\\\\x8eG0M\\\\x86\\\\xe3\\\\xad/\\\\x94\\\\x00\\\\x9d\\\\n\\\\xf9\\\\xc88\\\\xa3R\\\\xb3;\\\\xa66e\\\\xe5\\\\xc1\\\\xc7&\\\\xbfjD\\\\xae\\\\xe8o%\\\\xa1\\\\t\\\\x92\\\\xcf\\\\xb4\\\\xc2~@/\\\\xb51\\\\x98\\\\xe5\\\\xa7\\\\x8a\\\\x8bi7\\\\xe4^n\\\\xea0\\\\xbc#\\\\x8b\\\\x0e\\\\xe2\\\\xfch\\\"\" |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-04-29 15:13:52.747085,16,TCP 192.168.122.168:49892 -> 4.213.25.240:443,192.168.122.168,4.213.25.240,49892,443,TCP,Internal,Private Network,,,,,,India,Pune,8075,Microsoft Corporation,18.5211,73.8502,4.213.0.0/16,RA,,,Ether > IP > TCP,3,TCP RA Seq=3334411404 Ack=1369756557,525400577f945254007bb792080045000028b70c40008006e9adc0a87aa804d519f0c2e401bbc6bf148c51a4d38d501400005a300000,RT.W..RT.{....E..(..@.......z.............Q...P...Z0..,,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"52:54:00:57:7f:94\"\", \"\"src\"\": \"\"52:54:00:7b:b7:92\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 46860, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 59821, \"\"src\"\": \"\"192.168.122.168\"\", \"\"dst\"\": \"\"4.213.25.240\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 49892, \"\"dport\"\": 443, \"\"seq\"\": 3334411404, \"\"ack\"\": 1369756557, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"RA\"\", \"\"window\"\": 0, \"\"chksum\"\": 23088, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"192.168.122.168\", \"ip\": \"192.168.122.168\", \"packet_count\": 16, \"total_bytes_sent\": 3138, \"total_bytes_received\": 0, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [49899, 49892], \"first_seen\": 1777475599.749145, \"last_seen\": 1777475632.747085, \"packets\": [{\"num\": 0, \"time\": 1777475599.749145, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1777475600.054794, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1777475600.664177, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1777475601.8673, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1777475603.070404, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1777475604.273504, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1777475606.679735, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1777475611.492126, \"size\": 153, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1777475613.806131, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1777475614.116976, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1777475614.726326, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1777475615.929634, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1777475618.330775, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1777475621.289985, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1777475623.140551, \"size\": 301, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1777475632.747085, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 32.99794006347656, \"avg_packet_size\": 196.125, \"packets_per_second\": 0.4848787521045727}, {\"id\": \"4.213.25.240\", \"ip\": \"4.213.25.240\", \"packet_count\": 16, \"total_bytes_sent\": 0, \"total_bytes_received\": 3138, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"ports_used\": [443], \"first_seen\": 1777475599.749145, \"last_seen\": 1777475632.747085, \"packets\": [{\"num\": 0, \"time\": 1777475599.749145, \"size\": 153, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1777475600.054794, \"size\": 153, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1777475600.664177, \"size\": 153, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1777475601.8673, \"size\": 153, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1777475603.070404, \"size\": 153, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1777475604.273504, \"size\": 153, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1777475606.679735, \"size\": 153, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1777475611.492126, \"size\": 153, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1777475613.806131, \"size\": 301, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1777475614.116976, \"size\": 301, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1777475614.726326, \"size\": 301, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1777475615.929634, \"size\": 301, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1777475618.330775, \"size\": 301, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1777475621.289985, \"size\": 54, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1777475623.140551, \"size\": 301, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1777475632.747085, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"India\", \"city\": \"Pune\", \"lat\": 18.5211, \"lon\": 73.8502, \"asn\": 8075, \"isp\": \"Microsoft Corporation\", \"network\": \"4.213.0.0/16\"}, \"duration\": 32.99794006347656, \"avg_packet_size\": 196.125, \"packets_per_second\": 0.4848787521045727}];\n        const edges = [{\"source\": \"192.168.122.168\", \"target\": \"4.213.25.240\", \"packet_count\": 16, \"total_bytes\": 3138, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [49899, 49892], \"dst_ports\": [443], \"first_packet\": 1777475599.749145, \"last_packet\": 1777475632.747085, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1777475599.749145, \"timestamp_iso\": \"2026-04-29T20:43:19.749145\", \"timestamp_human\": \"2026-04-29 20:43:19.749\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46845, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 1, \"timestamp\": 1777475600.054794, \"timestamp_iso\": \"2026-04-29T20:43:20.054794\", \"timestamp_human\": \"2026-04-29 20:43:20.054\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46846, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 2, \"timestamp\": 1777475600.664177, \"timestamp_iso\": \"2026-04-29T20:43:20.664177\", \"timestamp_human\": \"2026-04-29 20:43:20.664\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46847, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 3, \"timestamp\": 1777475601.8673, \"timestamp_iso\": \"2026-04-29T20:43:21.867300\", \"timestamp_human\": \"2026-04-29 20:43:21.867\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46848, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1777475603.070404, \"timestamp_iso\": \"2026-04-29T20:43:23.070404\", \"timestamp_human\": \"2026-04-29 20:43:23.070\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46849, \"ip_len\": 139, \"ip_flags\": {\"DF\": false, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 5, \"timestamp\": 1777475604.273504, \"timestamp_iso\": \"2026-04-29T20:43:24.273504\", \"timestamp_human\": \"2026-04-29 20:43:24.273\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46850, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1777475606.679735, \"timestamp_iso\": \"2026-04-29T20:43:26.679735\", \"timestamp_human\": \"2026-04-29 20:43:26.679\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46851, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1777475611.492126, \"timestamp_iso\": \"2026-04-29T20:43:31.492126\", \"timestamp_human\": \"2026-04-29 20:43:31.492\", \"size\": 153, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46852, \"ip_len\": 139, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783804, \"tcp_ack\": 1692602478, \"tcp_window\": 1029, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 8, \"timestamp\": 1777475613.806131, \"timestamp_iso\": \"2026-04-29T20:43:33.806131\", \"timestamp_human\": \"2026-04-29 20:43:33.806\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46853, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 9, \"timestamp\": 1777475614.116976, \"timestamp_iso\": \"2026-04-29T20:43:34.116976\", \"timestamp_human\": \"2026-04-29 20:43:34.116\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46854, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 10, \"timestamp\": 1777475614.726326, \"timestamp_iso\": \"2026-04-29T20:43:34.726326\", \"timestamp_human\": \"2026-04-29 20:43:34.726\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46855, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 11, \"timestamp\": 1777475615.929634, \"timestamp_iso\": \"2026-04-29T20:43:35.929634\", \"timestamp_human\": \"2026-04-29 20:43:35.929\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46856, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 12, \"timestamp\": 1777475618.330775, \"timestamp_iso\": \"2026-04-29T20:43:38.330775\", \"timestamp_human\": \"2026-04-29 20:43:38.330\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46857, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 13, \"timestamp\": 1777475621.289985, \"timestamp_iso\": \"2026-04-29T20:43:41.289985\", \"timestamp_human\": \"2026-04-29 20:43:41.289\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46858, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49899, \"dst_port\": 443, \"tcp_seq\": 3881783903, \"tcp_ack\": 1692602478, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}, {\"packet_number\": 14, \"timestamp\": 1777475623.140551, \"timestamp_iso\": \"2026-04-29T20:43:43.140551\", \"timestamp_human\": \"2026-04-29 20:43:43.140\", \"size\": 301, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46859, \"ip_len\": 287, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411157, \"tcp_ack\": 1369756557, \"tcp_window\": 1028, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1777475632.747085, \"timestamp_iso\": \"2026-04-29T20:43:52.747085\", \"timestamp_human\": \"2026-04-29 20:43:52.747\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"192.168.122.168\", \"dst_ip\": \"4.213.25.240\", \"ttl\": 128, \"ip_id\": 46860, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 49892, \"dst_port\": 443, \"tcp_seq\": 3334411404, \"tcp_ack\": 1369756557, \"tcp_window\": 0, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": true, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"RST,ACK\"}], \"tcp_flags\": {\"PSH\": 14, \"ACK\": 16, \"RST\": 2}, \"packet_sizes\": [153, 153, 153, 153, 153, 153, 153, 153, 301, 301, 301, 301, 301, 54, 301, 54], \"inter_packet_intervals\": [0.3056490421295166, 0.6093828678131104, 1.2031230926513672, 1.203104019165039, 1.2030999660491943, 2.406230926513672, 4.812391042709351, 2.314004898071289, 0.31084513664245605, 0.6093499660491943, 1.20330810546875, 2.4011409282684326, 2.95920991897583, 1.8505661487579346, 9.606534004211426], \"connection_type\": \"TCP Data\", \"threat_level\": \"low\", \"duration\": 32.99794006347656, \"avg_packet_size\": 196.125, \"packets_per_second\": 0.4848787521045727, \"bytes_per_second\": 95.09684525650933, \"min_packet_size\": 54, \"max_packet_size\": 301, \"median_packet_size\": 153, \"avg_interval\": 2.1998626708984377, \"min_interval\": 0.3056490421295166, \"max_interval\": 9.606534004211426}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"},{"_id":{"$oid":"6a13e92c32de6bb6782baac8"},"sha256":"637175bedfe6852886341e15c4d48241d7a58083a45272df0aac35469c653f6f","timestamp":{"$date":"2026-05-25T11:46:12.636Z"},"analysis_successful":true,"csv_reports":{"network_analysis_domains_ips.csv":"name,ip,src,av detection,reputation,malicious,internal/ external\n","forensic_timeline.csv":"timestamp,category,event,details\n0.0,NGrep,input: /tmp/filtered_40x9buma.pcap,\"Payload: filter: ((ip || ip6) || (vlan && (ip || ip6)))\nmatch (JIT): .\n####\nT 10.152.152.11:63940 -> 184.30.157.69:443 [AP] #4\n...........j.Ht......$..tO.....@J.g....yg....&.,.+.0./.$.#.(.'.\n...........=.<.5./.\n...b.........assets.adobedtm.com..........\n...............................................#...........\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #6\n....I...E....i\n.B...R.*.v....4...kPDOWNGRD...,.....................#.........................0...0.............vM.u{..? @...0...*.H........0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10...250624000000Z..260725235959Z0h1.0...U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z.. .`..l..._...!.h.,\"\".N.*.7J......,0...*.H..............h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0...*.H........0a1.0...U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20...210330000000Z..310329235959Z0Y1.0...U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0...*.H.............0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^....F..l..bRBu....^^..a........=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040...`.H...l..0...g....0...g.....0...g.....0...g.....0...*.H...............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r..._....2u...X.W1~7...fm)..f.m.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#.$*.%L........t..m.......@................0...\n......0.....+.....0......0...0......t...f..7...)7.........20260523120114Z0s0q0I0...+.............[.X....:.i.oH....t...f..7...)7............vM.u{..? @.......20260523114501Z....20260530104501Z0...*.H..............m.`.W.4..*V.F.Z....I.Z~{.PFR.*q.$......6..L.M.h..j...5..y....u.R...Z.*y.C.........Y.......g..P}^....~:.Tc0P....bW._.<;vk.J8..q.L.@..\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #8\nn...........r...Ve ..CX.......y.W...XL....^o.v:.R.....|.....}@.-....Tlcm...s.O..;.y$..|K&~..-y.Q8M..b.f..@....!/......-.\"\"..............A.....V`..G...,+.D.v..i6..;.*...K...;\"\".....g...*.eF......qy.+..B.W...H0F.!...........e.%_N.$.....%|.$...@.p.!...........al......:...,...s}E..[.........\n##\nT 10.152.152.11:63940 -> 184.30.157.69:443 [AP] #10\n....F...BA....l.....\"\"..+......j.........m....S.Y ..9;[..j.E+....;... ..v.e...........(........Dq.%......`.X..q....X?..K|...%=p\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #12\n...........D.........A.......R.M...]....C.>S.O.\"\".74..#zl9O.....t..^...aK.C.....-|\n..0.&....uK.....6%k.,r.[....0r..U...j.]a.I..4i.....b.+j......M)s...R........u...E/x.....Z..)w\nU.........+$)f0....[..z..H.>......V....d!n..XX...........(.q.@.e...U.^....f..C.\"\"..-..HA)..i.3U.1..\n#\nT 10.152.152.11:63940 -> 184.30.157.69:443 [AP] #13\n.............|K6?.PQ$..*!MJ.H-.J..n.q....J.U|.........Hh.9...j.4z.'..._]..Q4..L..........g..WL^......HjV.OpM6.Q.K......\n.\nQT5....E.k......g...\\.K....m<.....R....%D.I.....e....q.D2-.......!.....u,.\"\"y.<.X.H..^*D....D..<.......A.{.....t.,.9.....AN-=r...... ^YC.tn.....K3x1.t.4r.\\hA.\\6.%.!.f(...d*.T.#.?.....dE#...G=.up.-.@*ba.......gaC.H/.....I.Dd...P......1J.g...>.!.s...(V...0..C..e.....(m...&..17%...PY...W..0..`....!<J>ts..VI..D.....Ah...V..0B..4.?....'...n...\nr.nL.I.M.z..]..=.b...q.#.@T.kY.>.\n##\nT 184.30.157.69:443 -> 10.152.152.11:63940 [AP] #15\n......q.@.e..r.u. 4...R....pm.......+......=r.}...+.W..=.....GR@.3.%...#..].k)k..[.c.@.....\"\".V.4D5....-..E..K\"\"@'.^..$....LW..xXD....D..7.q.c.K.M=....J..0.:...\"\"....4]..q..ZR..;5.B.kp.....e=!.O......m..1...W..-.>p..=..7.....#|F@.../...(.X...........;0J.....1.....$..3.....51;.....Ua.9`4.*$.....Q..~..(..>.s=.y....m!..K|..\"\"I... .-z....r\n.D4).......r....%j,(....4....I..]v..{+6....X>].\\......^F..$=t.....8..3.I.v.A...u\n####exit\"\n0.0,Network Stats,TShark Stat: protocol_hierarchy,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_protocol_hierarchy.txt\n0.0,Network Stats,TShark Stat: conversations_tcp,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_conversations_tcp.txt\n0.0,Network Stats,TShark Stat: conversations_udp,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_conversations_udp.txt\n0.0,Network Stats,TShark Stat: endpoints_ip,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_endpoints_ip.txt\n0.0,Network Stats,TShark Stat: http_stats,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_http_stats.txt\n0.0,Network Stats,TShark Stat: dns_stats,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_dns_stats.txt\n0.0,Network Stats,TShark Stat: expert_info,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_expert_info.txt\n0.0,Network Stats,TShark Stat: io_graph,Path: /tmp/tmpfxrhknda/tshark/stats/tshark_io_graph.txt\n","carved_files_analysis.csv":"Timestamp,Stream ID,Source IP,Source Port,Dest IP,Dest Port,Protocol,File Name,File Type,File Path,Size (bytes),MD5,SHA256,Entropy,Strings Preview,Content Preview (Hex)\n2026-05-25T11:46:10.274910,Tool:tmpfxrhknda/carved,Unknown,0,Unknown,0,HTTP,scalpel.conf,conf,/tmp/tmpfxrhknda/carved/scalpel.conf,796,a2da2c51920b2a2338daac52dc8f3894,35fa9929898a9ad0b97ddb04fb3b9b8cc0295a9e38cc7463922f86fa92d7c165,3.97,\" Scalpel Configuration Generated by Network Analyzer,  ext      case  header          footer,  Graphics, jpg        y     , x10   , jpg        y     , xe1           , png        y     , x0a   , gif        y     , x61   , gif        y     , x61   ,  Documents, pdf        y     , x46           , zip        y     , x04           ,  Executables, exe        y     , x5a                   REVERSE, elf        y     , x46           REVERSE,  Multimedia, mp3        y     , x33                , mp4        y     , x70 REVERSE,         \",0a 23 20 53 63 61 6c 70 65 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 4e 65 74 77 6f 72 6b 20 41 6e 61 6c 79 7a 65 72 0a 23 20 65 78 74 20 20 20 20 20 20 63 61 73 65 20 20 68 65 61 64 65 72 20 20 20 20 20 20 20 20 20 20 66 6f 6f 74 65 72 0a 0a 23 20 47 72 61 70 68 69 63 73 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 30 5c 78 30 30 5c 78 31 30 20 20 20 5c 78 66 66 5c 78 64 39 0a 6a 70 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 66 66 5c 78 64 38 5c 78 66 66 5c 78 65 31 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 64 39 0a 70 6e 67 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 38 39 5c 78 35 30 5c 78 34 65 5c 78 34 37 5c 78 30 64 5c 78 30 61 5c 78 31 61 5c 78 30 61 20 20 20 5c 78 34 39 5c 78 34 35 5c 78 34 65 5c 78 34 34 5c 78 61 65 5c 78 34 32 5c 78 36 30 5c 78 38 32 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 37 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 67 69 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 37 5c 78 34 39 5c 78 34 36 5c 78 33 38 5c 78 33 39 5c 78 36 31 20 20 20 5c 78 30 30 5c 78 33 62 0a 0a 23 20 44 6f 63 75 6d 65 6e 74 73 0a 70 64 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 32 35 5c 78 35 30 5c 78 34 34 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 5c 78 32 35 5c 78 34 35 5c 78 34 66 5c 78 34 36 5c 78 30 44 0a 7a 69 70 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 33 5c 78 30 34 20 20 20 20 20 20 20 20 20 20 20 5c 78 35 30 5c 78 34 62 5c 78 30 35 5c 78 30 36 0a 0a 23 20 45 78 65 63 75 74 61 62 6c 65 73 0a 65 78 65 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 64 5c 78 35 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 65 6c 66 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 37 66 5c 78 34 35 5c 78 34 63 5c 78 34 36 20 20 20 20 20 20 20 20 20 20 20 52 45 56 45 52 53 45 0a 0a 23 20 4d 75 6c 74 69 6d 65 64 69 61 0a 6d 70 33 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 34 39 5c 78 34 34 5c 78 33 33 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 66 66 5c 78 66 62 0a 6d 70 34 20 20 20 20 20 20 20 20 79 20 20 20 20 20 5c 78 30 30 5c 78 30 30 5c 78 30 30 5c 78 32 30 5c 78 36 36 5c 78 37 34 5c 78 37 39 5c 78 37 30 20 52 45 56 45 52 53 45 0a 20 20 20 20 20 20 20 20\n2026-05-25T11:46:10.277157,Tool:carved/scalpel,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpfxrhknda/carved/scalpel/audit.txt,468,e9bb91feb3de9f6256b91aa7959e238e,384fc96fcd5f9859dbd953051a7c441bee41be030a5a68be7fa18908d290b461,4.99,\"Scalpel version 1.60 audit file, Started at Mon May 25 11:46:10 2026, Command line:, scalpel -c /tmp/tmpfxrhknda/carved/scalpel.conf /tmp/filtered_40x9buma.pcap -o /tmp/tmpfxrhknda/carved/scalpel , Output directory: /tmp/tmpfxrhknda/carved/scalpel, Configuration file: /tmp/tmpfxrhknda/carved/scalpel.conf, Opening target , /tmp/filtered_40x9buma.pcap, The following files were carved:, File,   Start, Chop, Length, Extracted From, Completed at Mon May 25 11:46:10 2026\",0a 53 63 61 6c 70 65 6c 20 76 65 72 73 69 6f 6e 20 31 2e 36 30 20 61 75 64 69 74 20 66 69 6c 65 0a 53 74 61 72 74 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 43 6f 6d 6d 61 6e 64 20 6c 69 6e 65 3a 0a 73 63 61 6c 70 65 6c 20 2d 63 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 20 0a 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 73 63 61 6c 70 65 6c 2e 63 6f 6e 66 0a 0a 4f 70 65 6e 69 6e 67 20 74 61 72 67 65 74 20 22 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 22 0a 0a 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 69 6c 65 73 20 77 65 72 65 20 63 61 72 76 65 64 3a 0a 46 69 6c 65 09 09 20 20 53 74 61 72 74 09 09 09 43 68 6f 70 09 09 4c 65 6e 67 74 68 09 09 45 78 74 72 61 63 74 65 64 20 46 72 6f 6d 0a 0a 0a 43 6f 6d 70 6c 65 74 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a\n2026-05-25T11:46:10.271910,Tool:carved/foremost,Unknown,0,Unknown,0,HTTP,audit.txt,txt,/tmp/tmpfxrhknda/carved/foremost/audit.txt,698,b97c894c60e49e546c3fef9f71f95553,2f6f9c3d3544ebeaa4c66470d1460ea0e6e05f80f177faf268ba5c2ad1d6005b,4.88,\"Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus, Audit File, Foremost started at Mon May 25 11:46:10 2026, Invocation: foremost -t all -i /tmp/filtered_40x9buma.pcap -o /tmp/tmpfxrhknda/carved/foremost , Output directory: /tmp/tmpfxrhknda/carved/foremost, Configuration file: /etc/foremost.conf, ------------------------------------------------------------------, File: /tmp/filtered_40x9buma.pcap, Start: Mon May 25 11:46:10 2026, Length: 6 KB (7008 bytes),  Name (bs, 512),        Size,  File Offset,  Comment , Finish: Mon May 25 11:46:10 2026, 0 FILES EXTRACTED, ------------------------------------------------------------------, Foremost finished at Mon May 25 11:46:10 2026\",46 6f 72 65 6d 6f 73 74 20 76 65 72 73 69 6f 6e 20 31 2e 35 2e 37 20 62 79 20 4a 65 73 73 65 20 4b 6f 72 6e 62 6c 75 6d 2c 20 4b 72 69 73 20 4b 65 6e 64 61 6c 6c 2c 20 61 6e 64 20 4e 69 63 6b 20 4d 69 6b 75 73 0a 41 75 64 69 74 20 46 69 6c 65 0a 0a 46 6f 72 65 6d 6f 73 74 20 73 74 61 72 74 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 49 6e 76 6f 63 61 74 69 6f 6e 3a 20 66 6f 72 65 6d 6f 73 74 20 2d 74 20 61 6c 6c 20 2d 69 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 20 2d 6f 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 20 0a 4f 75 74 70 75 74 20 64 69 72 65 63 74 6f 72 79 3a 20 2f 74 6d 70 2f 74 6d 70 66 78 72 68 6b 6e 64 61 2f 63 61 72 76 65 64 2f 66 6f 72 65 6d 6f 73 74 0a 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 3a 20 2f 65 74 63 2f 66 6f 72 65 6d 6f 73 74 2e 63 6f 6e 66 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 46 69 6c 65 3a 20 2f 74 6d 70 2f 66 69 6c 74 65 72 65 64 5f 34 30 78 39 62 75 6d 61 2e 70 63 61 70 0a 53 74 61 72 74 3a 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 4c 65 6e 67 74 68 3a 20 36 20 4b 42 20 28 37 30 30 38 20 62 79 74 65 73 29 0a 20 0a 4e 75 6d 09 20 4e 61 6d 65 20 28 62 73 3d 35 31 32 29 09 20 20 20 20 20 20 20 53 69 7a 65 09 20 46 69 6c 65 20 4f 66 66 73 65 74 09 20 43 6f 6d 6d 65 6e 74 20 0a 0a 46 69 6e 69 73 68 3a 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a 0a 30 20 46 49 4c 45 53 20 45 58 54 52 41 43 54 45 44 0a 09 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 46 6f 72 65 6d 6f 73 74 20 66 69 6e 69 73 68 65 64 20 61 74 20 4d 6f 6e 20 4d 61 79 20 32 35 20 31 31 3a 34 36 3a 31 30 20 32 30 32 36 0a\n","network_analysis_protocols.csv":"Protocol,Packets,Bytes,Packet %,Byte %\nTCP,19,6247,100.00%,100.00%\n","network_analysis_ports.csv":"Port,Packets,Bytes,Packet %,Byte %\n63940,19,6247,50.00%,50.00%\n443,19,6247,50.00%,50.00%\n","packet_forensic_timeline.csv":"Timestamp_UTC,Packet_Num,Flow_ID,Src_IP,Dst_IP,Src_Port,Dst_Port,Protocol,Src_Country,Src_City,Src_ASN,Src_AS_Org,Src_Lat,Src_Lon,Src_Network,Dst_Country,Dst_City,Dst_ASN,Dst_AS_Org,Dst_Lat,Dst_Lon,Dst_Network,TCP_Flags,DNS_Query,HTTP_Url,Protocol_Stack,Layer_Depth,Description,Packet_Content(Hex),Packet_Content,Alerts,Complete_Dissection\n2026-05-25 06:02:45.999135,1,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,S,,,Ether > IP > TCP,3,TCP S Seq=2818113181 Ack=0,bc24112907bbbc2411360d0c0800450000348a104000800678ac0a98980bb81e9d45f9c401bba7f8fe9d000000008002faf0da010000020405b40103030801010402,\".$.)...$.6\n...E..4..@...x.\n......E................................\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 35344, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30892, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113181, \"\"ack\"\": 0, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"S\"\", \"\"window\"\": 64240, \"\"chksum\"\": 55809, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')]\"\"}}]\"\n2026-05-25 06:02:45.999160,2,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,SA,,,Ether > IP > TCP,3,TCP SA Seq=3507099537 Ack=2818113182,bc2411360d0cbc24112907bb08004500003400004000400642bdb81e9d450a98980b01bbf9c4d10a1791a7f8fe9e8012faf0f82d0000020405b4010104020103030a,\".$.6\n..$.)....E..4..@.@.B....E\n........\n...........-.............\n\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 52, \"\"id\"\": 0, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 17085, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507099537, \"\"ack\"\": 2818113182, \"\"dataofs\"\": 8, \"\"reserved\"\": 0, \"\"flags\"\": \"\"SA\"\", \"\"window\"\": 64240, \"\"chksum\"\": 63533, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 10)]\"\"}}]\"\n2026-05-25 06:02:45.999475,3,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113182 Ack=3507099538,bc24112907bbbc2411360d0c0800450000288a114000800678b70a98980bb81e9d45f9c401bba7f8fe9ed10a1792501020140d050000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n..P. .\n...\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35345, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30903, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113182, \"\"ack\"\": 3507099538, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 3333, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.000030,4,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2818113182 Ack=3507099538,bc24112907bbbc2411360d0c0800450000e28a124000800677fc0a98980bb81e9d45f9c401bba7f8fe9ed10a17925018201450b2000016030300b5010000b103036a144874cebd08fa009824ea0c744f9df2f2da95404a98672eacf6d87967aa81000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a010000620000001800160000136173736574732e61646f626564746d2e636f6d000500050100000000000a00080006001d00170018000b00020100000d001a00180804080508060401050102010403050302030202060106030023000000170000ff01000100,\".$.)...$.6\n...E.....@...w.\n......E.........\n..P. .P..............j.Ht......$..tO.....@J.g....yg....&.,.+.0./.$.#.(.'.\n.\t.........=.<.5./.\n...b.........assets.adobedtm.com..........\n.................\n.............................#...........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 226, \"\"id\"\": 35346, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30716, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113182, \"\"ack\"\": 3507099538, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8212, \"\"chksum\"\": 20658, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 181, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientHello  msgtype=client_hello msglen=177 version=TLS 1.2 gmt_unix_time=Mon, 25 May 2026 13:02:44  (1779714164) random_bytes=cebd08fa009824ea0c744f9df2f2da95404a98672eacf6d87967aa81 sidlen=0 sid=b'' cipherslen=38 ciphers=[TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA] complen=1 comp=null extlen=98 ext=[<TLS_Ext_ServerName  type=server_name len=24 servernameslen=22 servernames=[b'assets.adobedtm.com'] |>, <TLS_Ext_CSR  type=status_request len=5 stype=ocsp req=[<OCSPStatusRequest  respidlen=0 reqextlen=0 reqext=<X509_Extensions  |> |>] |>, <TLS_Ext_SupportedGroups  type=supported_groups len=8 groupslen=6 groups=[x25519, secp256r1, secp384r1] |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=2 ecpllen=1 ecpl=[uncompressed] |>, <TLS_Ext_SignatureAlgorithms  type=signature_algorithms len=26 sig_algs_len=24 sig_algs=[sha256+rsaepss, sha384+rsaepss, sha512+rsaepss, sha256+rsa, sha384+rsa, sha1+rsa, sha256+ecdsa, sha384+ecdsa, sha1+ecdsa, sha1+dsa, sha512+rsa, sha512+ecdsa] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>, <TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.000039,5,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3507099538 Ack=2818113368,bc2411360d0cbc24112907bb080045000028ad67400040069561b81e9d450a98980b01bbf9c4d10a1792a7f8ff585010003ff8210000,\".$.6\n..$.)....E..(.g@.@..a...E\n........\n.....XP..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44391, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38241, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507099538, \"\"ack\"\": 2818113368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.337499,6,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > Padding,6,TCP PA Seq=3507099538 Ack=2818113368,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,\".$.6\n..$.)....E.\n..h@.@......E\n........\n.....XP..?.z......I...E....i\n.B...R.*.v....4...kPDOWNGRD...,.....................#.........................0...0.............vM.u{\n.? @...0\n.\t*.H..\n.....0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\n250624000000Z.\n260725235959Z0h1.0\t..U....US1.0...U...\nCalifornia1.0...U....San Jose1.0...U.\n.\nAdobe Inc.1.0...U....assets.adobedtm.com0Y0...*.H.=....*.H.=....B..J....9u....o..7...g.?.n...I..[...5F....S..r...1Q.G.sSLQ;..$c...@...=0..90...U.#..0...t...f..7...)7.......0...U..........gK.c.\\.F....r.V.0....U.....0....assets.adobedtm.com..cdn1-staging.adoberesources.net..assets.adoberesources.net.!assets-staging.adoberesources.net..cdn1.adoberesources.net..commerce.adobedtm.com..magento-recs-sdk.adobe.net0>..U. .70503..g.....0)0'..+.........http://www.digicert.com/CPS0...U...........0...U.%..0...+.........+.......0....U.....0..0H.F.D.Bhttp://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0H.F.D.Bhttp://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl0....+........{0y0$..+.....0...http://ocsp.digicert.com0Q..+.....0..Ehttp://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt0...U.......0.0..~.\n+.....y......n...j.h.v..m}....w..._......3Ze....s....iw.....Vwm.....G0E.!..........a?z...p.....\"\"_(\\..@..... OL...*V?.....J>.&V..G...D.#b.x...w..1~WE..E..8...A...!Z\"\".....v...R......Vw......H0F.!.......R}..CW.Y....g...k.......{..!...._.7....h..Hg...Sd...y.D.TU8s..u..NC........$&..e..._8..?rg}U7........Vw......F0D. F...9.p..q.$....e........*....Z\t. .`..l..._...!.h.,\"\".N.*.7J......,0\n.\t*.H..\n...........h(l....._....T>..c.j.p..../..F9.-.k2...@.....Pk....?.Y\n..5m.....,.............-..1.o....L....D.n.(.R..Gz5.,)..m.m........4......0.M1.......++\\.\"\".#.......`Y.=5.}.,..T.EZ.......g..r...'....V.Q...._.<k~....D/.('g7..&xi..!. .+|?&o...Y.k..3=... .....%[.bFo.U.....0...0..............+V..z.P,#..f0\n.\t*.H..\n.....0a1.0\t..U....US1.0...U.\n..DigiCert Inc1.0...U....www.digicert.com1 0...U....DigiCert Global Root G20..\n210330000000Z.\n310329235959Z0Y1.0\t..U....US1.0...U.\n..DigiCert Inc1301..U...*DigiCert Global G2 TLS RSA SHA256 2020 CA10..\"\"0\n.\t*.H..\n..........0..\n........bO..co..RV.m'{z.V............`A.p....'\n.W8[}.Q.q..jA.[5..{....$0.V...}.....M.......\"\".1\"\".ai.&.x....}f.uD.s....]\n.YC...:..H..k7.c..F..E.}#...Q..Q._.IFT.,.......<...9.i.2...WL.GB|...}..MT.B.....w..H....*...Cp.?vk.LI.$^.\n..F..l..bRBu....^^..a.....\t..=...Gi..........0..~0...U.......0.......0...U......t...f..7...)7.......0...U.#..0...N\"\"T ....n..........90...U...........0...U.%..0...+.........+.......0v..+........j0h0$..+.....0...http://ocsp.digicert.com0@..+.....0..4http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B..U...;0907.5.3.1http://crl3.digicert.com/DigiCertGlobalRootG2.crl0=..U. .6040..\t`.H...l..0...g....0...g.....0...g.....0...g.....0\n.\t*.H..\n............p.(.i.|t...&{S...e.......ZC..MLV_..... .Y..J..*......J;...o.).0?$....{..,..kv3..UR.Y..............r.\t._....2u...X.W1~7...fm)..f\tm.n..../...\\Vd..}..8S..]Fm\\.'...~....R....7|*..UZ8r.....Ls..75.).i.v...{.....g...Z!....?......Y.#\n$*.%L........t..m.......@................0...\n......0....\t+.....0......0...0......t...f..7...)7.........20260523120114Z0s0q0I0\t..+.............[.X....:.i.oH....t...f..7...)7............vM.u{\n.? @.......20260523114501Z....20260530104501Z0\n.\t*.H..\n...........m.`.W.4..*V.F.Z....I.Z~{.PFR.*q.$......6..L.M.h..j...5..y....u.R...Z.*y.C.........Y.......g..P}^....~:.Tc0P....bW._.<;vk.J8..q.L.@..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 3456, \"\"id\"\": 44392, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 34824, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507099538, \"\"ack\"\": 2818113368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 1402, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 73, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSServerHello  msgtype=server_hello msglen=69 version=TLS 1.2 gmt_unix_time=Tue, 10 May 2078 00:21:30  (3419367690) random_bytes=9942f2eef052b52add76abe7dc8634cabdb26b50444f574e47524401 sidlen=0 sid=b'' cipher=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 comp=null extlen=29 ext=[<TLS_Ext_RenegotiationInfo  type=renegotiation_info len=1 reneg_conn_len=0 renegotiated_connection=b'' |>, <TLS_Ext_ServerName  type=server_name len=0 |>, <TLS_Ext_SupportedPointFormat  type=ec_point_formats len=4 ecpllen=3 ecpl=[uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2] |>, <TLS_Ext_SessionTicket  type=session_ticket len=0 ticket=b'' |>, <TLS_Ext_CSR  type=status_request len=0 |>, <TLS_Ext_ExtendedMasterSecret  type=extended_master_secret len=0 |>] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 2972, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSCertificate  msgtype=certificate msglen=2968 certslen=2965 certs=[(1731, [X.509 Cert. Subject:/C=US/ST=California/L=San Jose/O=Adobe Inc./CN=assets.adobedtm.com, Issuer:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1]), (1228, [X.509 Cert. Subject:/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, Issuer:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2])] |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"Padding\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-05-25 06:02:46.337692,7,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113368 Ack=3507102954,bc24112907bbbc2411360d0c0800450000288a134000800678b50a98980bb81e9d45f9c401bba7f8ff58d10a24ea50102014fef20000,\".$.)...$.6\n...E..(..@...x.\n......E.......X.\n$.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35347, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30901, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113368, \"\"ack\"\": 3507102954, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8212, \"\"chksum\"\": 65266, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.381723,8,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > _TLSEncryptedContent,4,TCP PA Seq=3507102954 Ack=2818113368,bc2411360d0cbc24112907bb080045000146ad6b40004006943fb81e9d450a98980b01bbf9c4d10a24eaa7f8ff585018003ff93f00006e8ad0b1818c08ee09dba6ca720c8911566520b1ca43589914dcb2bf15e179e6579ca8dd584ca4cea2fa5e6f8a763ae6521d8396cfcd7cc29d9c999e7d40d52dc3f2aab2546c636ddeb81e73d24f90b33bc17924bb9a7c4b267e81e82d79e951384dc01962b26604a44093de8798212f9be9f2e0aebd2dbd22179a16030300950c0000910300174104a8de8c095660ad99470299902c2beb44b476f3866936c7043bed2aa2e39b4bae1d813b2213a4dfd8f4670084822aea6546d57f178dffb27179c52ba52e42e757040300483046022100a49a12bcd0031881c1976500255f4e1e24c1fdd4c1d2257c802415a5f440e670022100f4d9d2ec16cdc7a7ea11616cf38bea0bd3e83ad8d3c42c87830e737d45e9ed5b16030300040e000000,\"n.......\t...r...Ve ..CX.......y.W...XL....^o.v:.R.....|.....}@.-....Tlcm...s.O..;.y$..|K&~..-y.Q8M..b.f..@....!/......-.\"\"..............A....\tV`..G...,+.D.v..i6..;.*...K...;\"\".....g...*.eF......qy.+..B.W...H0F.!...........e.%_N.$.....%|.$...@.p.!...........al......:...,...s}E..[.........\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 326, \"\"id\"\": 44395, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37951, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507102954, \"\"ack\"\": 2818113368, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63807, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"_TLSEncryptedContent\"\", \"\"fields\"\": {\"\"load\"\": \"\"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\"\"}}]\"\n2026-05-25 06:02:46.381995,9,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113368 Ack=3507103240,bc24112907bbbc2411360d0c0800450000288a144000800678b40a98980bb81e9d45f9c401bba7f8ff58d10a260850102013fdd50000,\".$.)...$.6\n...E..(..@...x.\n......E.......X.\n&.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35348, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30900, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113368, \"\"ack\"\": 3507103240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8211, \"\"chksum\"\": 64981, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.392725,10,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=2818113368 Ack=3507103240,bc24112907bbbc2411360d0c0800450000a68a154000800678350a98980bb81e9d45f9c401bba7f8ff58d10a260850182013566800001603030046100000424104a815176cafc80f90c522cbfb2b7ff5d6e5c3a56acda517f99da385bfd06d11ccf119531d5920d72e393b5b94c46acd452bbbc7dd043b9d130e2015af76046597140303000101160303002800000000000000004471b525b2a31ad1a01b60ea5801b971b5b016a7583fd4194b7cc61ac6253d70,\"A....l.....\"\"..+......j.........m....S.Y ..9;[..j.E+....;... ..v.e.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 166, \"\"id\"\": 35349, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30773, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113368, \"\"ack\"\": 3507103240, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8211, \"\"chksum\"\": 22120, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 70, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSClientKeyExchange  msgtype=client_key_exchange msglen=66 exchkeys=<Raw  load=b'A\\\\x04\\\\xa8\\\\x15\\\\x17l\\\\xaf\\\\xc8\\\\x0f\\\\x90\\\\xc5\\\"\"\\\\xcb\\\\xfb+\\\\x7f\\\\xf5\\\\xd6\\\\xe5\\\\xc3\\\\xa5j\\\\xcd\\\\xa5\\\\x17\\\\xf9\\\\x9d\\\\xa3\\\\x85\\\\xbf\\\\xd0m\\\\x11\\\\xcc\\\\xf1\\\\x19S\\\\x1dY \\\\xd7.9;[\\\\x94\\\\xc4j\\\\xcdE+\\\\xbb\\\\xc7\\\\xdd\\\\x04;\\\\x9d\\\\x13\\\\x0e \\\\x15\\\\xafv\\\\x04e\\\\x97' |> |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSHelloRequest  msgtype=hello_request msglen=0 |>, <TLSHelloRequest  msgtype=hello_request msglen=0 |>, <Raw  load=b'Dq\\\\xb5%\\\\xb2\\\\xa3\\\\x1a\\\\xd1\\\\xa0\\\\x1b`\\\\xeaX\\\\x01\\\\xb9q\\\\xb5\\\\xb0\\\\x16\\\\xa7X?\\\\xd4\\\\x19K|\\\\xc6\\\\x1a\\\\xc6%=p' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.392743,11,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3507103240 Ack=2818113494,bc2411360d0cbc24112907bb080045000028ad6c40004006955cb81e9d450a98980b01bbf9c4d10a2608a7f8ffd65010003ff8210000,\".$.6\n..$.)....E..(.l@.@..\\...E\n........\n&.....P..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44396, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38236, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103240, \"\"ack\"\": 2818113494, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:46.761586,12,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS > TLS > TLS,6,TCP PA Seq=3507103240 Ack=2818113494,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,\"\nq.@\te...U.^....f..C.\"\"..-..HA)..i.3U\n1..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 314, \"\"id\"\": 44397, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37961, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103240, \"\"ack\"\": 2818113494, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63795, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 22, \"\"version\"\": 771, \"\"len\"\": 218, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSNewSessionTicket  msgtype=session_ticket msglen=214 lifetime=83100 ticketlen=208 ticket=b'\\\\x00\\\\x00\\\\x1e\\\\x80\\\\x9c\\\\x87A\\\\x93\\\\xfd\\\\xd5\\\\x8d\\\\xc2\\\\xef\\\\x1aR\\\\x1aM\\\\xa3\\\\xb6\\\\x95]\\\\xe3\\\\x7f\\\\xd8\\\\xbbC\\\\x05>S\\\\x13O\\\\x9e\\\"\"\\\\xd074\\\\x0b\\\\xd0#zl9O\\\\x86\\\\xd5\\\\x16\\\\x99\\\\x95t\\\\xac\\\\x9a^\\\\x06\\\\xfc\\\\xc3aK\\\\xebC\\\\x90\\\\x9f\\\\xbc\\\\xc2\\\\xd1-|\\\\n\\\\xb1\\\\x020\\\\x01&\\\\x9f\\\\xb5\\\\xda\\\\xa1uK\\\\xb2\\\\xa5\\\\xc3\\\\x16\\\\x986%k\\\\xef,r\\\\xb3[\\\\xba\\\\xd6\\\\xc3\\\\xc30r\\\\xf2\\\\xbaU\\\\x8e\\\\xba\\\\x10j\\\\xb3]a\\\\xbaI\\\\xa7\\\\xef4i\\\\xd4\\\\xd7\\\\x0e\\\\x9b\\\\xe0b\\\\x89+j\\\\x92\\\\x91\\\\x9a\\\\xc2\\\\xee\\\\xceM)s\\\\xc6\\\\xf7\\\\xb9R\\\\x03\\\\xfa\\\\x8f\\\\x91\\\\xec\\\\xdc\\\\xf4\\\\x01u\\\\xc0\\\\x9f\\\\xb4E/x\\\\xcd\\\\xb2\\\\x15\\\\xbb\\\\x95Z\\\\x19\\\\xc4)w\\\\nU\\\\xb6\\\\x10\\\\xda\\\\x18\\\\x11\\\\x0f\\\\t\\\\xc3\\\\x86+$)f0\\\\xbb\\\\xda\\\\x19\\\\x87[\\\\xe4\\\\xc9z\\\\xaf\\\\xd7H\\\\x82>\\\\x81\\\\xf3\\\\xf1\\\\xbe\\\\xb4\\\\x8bV\\\\x8b\\\\xab\\\\xa8\\\\xafd!n\\\\xf1\\\\xd5XX\\\\xf7' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 20, \"\"version\"\": 771, \"\"len\"\": 1, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSChangeCipherSpec  msgtype=change_cipher_spec |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 40, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<Raw  load=b'\\\\rq\\\\xfc@\\\\te\\\\x02\\\\x95\\\\x17U\\\\xb1^\\\\xf1\\\\x17\\\\xb3\\\\xd4f\\\\xce\\\\xc1C\\\\xe9\\\"\"\\\\xa3\\\\xa8-\\\\xb0\\\\xf9HA)\\\\xe9\\\\x90i\\\\xb03U\\\\r1\\\\xd9\\\\xda' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.767384,13,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=2818113494 Ack=3507103514,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,\".$.)...$.6\n...E.....@...v.\n......E.........\n'.P. .^................|K6?.PQ$..*!MJ.H-.J..n.q....J.U|.........Hh.9...j.4z.'..._]..Q4..L..........g..WL^......HjV.OpM6.Q.K......\n.\nQT5....E.k......g...\\.K....m<....\tR....%D.I.....e....q.D2-.......!.....u,.\"\"y.<.X.H..^*D....D..<.......A.{.....t.,.9.....AN-=r...... ^YC.tn.....K3x1.t.4r.\\hA.\\6.%.!.f(...d*.T.#.?.....dE#...G=.up.-.@*ba.......gaC.H/.....I.Dd...P......1J.g...>.!.s...(V...0..C..e.....(m...&..17%...PY...W..0..`....!<J>ts..VI..D.....Ah...V.\n0B..4.?....'...n...\nr.nL.I.M.z..]..=.b...q.#.@T.kY.>.\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 535, \"\"id\"\": 35350, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30403, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113494, \"\"ack\"\": 3507103514, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 8210, \"\"chksum\"\": 24200, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 490, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x00\\\\x01|K6?\\\\xcfPQ$\\\\x90\\\\xdf*!MJ\\\\xb2H-\\\\xd6J\\\\x05\\\\xfen\\\\xd4q\\\\x03\\\\xd7\\\\x93\\\\x82J\\\\xbfU|\\\\x08\\\\x0f\\\\xa9\\\\xc3\\\\xae\\\\xb4\\\\x8f\\\\x13\\\\x9cHh\\\\x949\\\\xb1\\\\xc8\\\\x17j\\\\xd64z\\\\xeb\\\\'\\\\xa9\\\\x8c\\\\xb3_]\\\\xee\\\\xd6Q4\\\\x16\\\\x8dL\\\\x83\\\\x81\\\\xab\\\\x9e\\\\x98\\\\x12\\\\xc3\\\\xe2\\\\xa7\\\\x92g\\\\xd7\\\\x12WL^\\\\xa7\\\\x82\\\\x96\\\\xab\\\\x8e\\\\xaeHjV\\\\x9fOpM6\\\\xc1Q\\\\xd4K\\\\xea\\\\xe3\\\\x0b\\\\xbd\\\\xf5\\\\xa8\\\\n\\\\xbe\\\\nQT5\\\\xc2\\\\x0e\\\\xe5\\\\xa7E\\\\x9ak\\\\x11\\\\x16\\\\x0b\\\\x8a\\\\xff\\\\x8bg\\\\xd5\\\\x9b\\\\x80\\\\\\\\\\\\xa0K\\\\xaa\\\\xe1\\\\xd9\\\\x93m<\\\\xac\\\\xfa\\\\xf3\\\\xf4\\\\tR\\\\xce\\\\x1b\\\\xb5\\\\xfe%D\\\\x02I\\\\x0f\\\\xd7\\\\xc6\\\\xc6\\\\xc5e\\\\xff\\\\xe4\\\\xd7\\\\xb3q\\\\xa2D2-\\\\x91\\\\xb3\\\\xc0\\\\xf9\\\\x96\\\\xd2\\\\xab!\\\\xa4\\\\xe6\\\\xbe\\\\x03\\\\xf1u,\\\\xad\\\"\"y\\\\x1e<\\\\xdbX\\\\x96H\\\\x12\\\\xf2^*D\\\\x0b\\\\xcd\\\\x86\\\\xacD\\\\x7f\\\\xfa<\\\\xf2\\\\x94\\\\xe4\\\\xa1\\\\xbc\\\\xaa\\\\xf0A\\\\xcb{\\\\x93\\\\xe4\\\\x9c\\\\xbb\\\\xc6t\\\\xf7,\\\\xd99\\\\x87\\\\x13\\\\xcb\\\\xfc\\\\x8cAN-=r\\\\x93\\\\xaa.\\\\xd3\\\\xb4\\\\x9e ^YC\\\\x86tn\\\\xa8\\\\xb7\\\\xa2\\\\x10\\\\xe3K3x1\\\\xa6t\\\\xe64r\\\\xa3\\\\\\\\hA\\\\x9a\\\\\\\\6\\\\xe0%\\\\xe5!\\\\xc9f(\\\\xdb\\\\xe1\\\\x14d*\\\\xe9T\\\\x88#\\\\x86?\\\\xe9\\\\xaa\\\\xbf\\\\x8d\\\\xa2dE#\\\\xc1\\\\xe6\\\\x1dG=\\\\x0bup\\\\x7f-\\\\xf4@*ba\\\\xbf\\\\x13\\\\x02\\\\xe3\\\\xea\\\\xae\\\\x1egaC\\\\x89H/\\\\xf2\\\\x05\\\\xc7\\\\xaf\\\\xffI\\\\xbdDd\\\\xe5\\\\xe1\\\\xdfP\\\\xd6\\\\x17\\\\xc4\\\\xe8\\\\xa8\\\\xb61J\\\\x96g\\\\xa7\\\\x07\\\\x1e>\\\\xf0!\\\\xcds\\\\x86\\\\xfc\\\\x92(V\\\\x86\\\\xf7\\\\x0c0\\\\x99\\\\x07C\\\\xa4\\\\x04e\\\\xa1\\\\xa1\\\\xef\\\\xfa\\\\x1c(m\\\\x98\\\\xcd\\\\x8e&\\\\x12\\\\xbf17%\\\\xbc\\\\xf7\\\\xf4PY\\\\x17\\\\x18\\\\xddW\\\\x91\\\\xdb0\\\\x02\\\\x1f`\\\\xa4\\\\xce\\\\xa8\\\\xb8!<J>ts\\\\xe5\\\\xc7VI\\\\xe1\\\\x05D\\\\x11\\\\x19\\\\xfa\\\\xce\\\\xf7Ah\\\\xba\\\\xbe\\\\xc5V\\\\x07\\\\r0B\\\\x1c\\\\xac4\\\\xc8?\\\\xae\\\\x8f\\\\x9c\\\\x00\\\\'\\\\xe6\\\\x82\\\\x9bn\\\\x18\\\\x8e\\\\x1b\\\\nr\\\\x19nL\\\\x97I\\\\xc6M\\\\x8cz\\\\x9e\\\\xbb]\\\\x95\\\\xa7=\\\\xf1b\\\\x9b\\\\xfd\\\\x1eq\\\\xec#\\\\xd5@T\\\\xffkY\\\\x15>\\\\xff' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:46.767411,14,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,A,,,Ether > IP > TCP,3,TCP A Seq=3507103514 Ack=2818113989,bc2411360d0cbc24112907bb080045000028ad6e40004006955ab81e9d450a98980b01bbf9c4d10a271aa7f901c55010003ff8210000,\".$.6\n..$.)....E..(.n@.@..Z...E\n........\n'.....P..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44398, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38234, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103514, \"\"ack\"\": 2818113989, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:02:47.105333,15,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,PA,,,Ether > IP > TCP > TLS,4,TCP PA Seq=3507103514 Ack=2818113989,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,\".$.6\n..$.)....E....o@.@......E\n........\n'.....P..?.........\nq.@\te..r.u. 4...R..\n.pm.......+......=r.}...+.W..=.....GR@.3.%...#..].k)k..[.c.@.....\"\".V.4D5....-..E..K\"\"@'.^..$....LW..xXD....D..7.q.c.K.M=....J..0.:...\"\"....4]..q..ZR..;5.B.kp.....e=!.O......m..1...W..-.>p..=..7.....#|F@.../...(.X...........;0J.....1.....$..3.\t...51;.....Ua.9`4.*$.....Q..~..(..>.s=.y....m!..K|..\"\"I... .-z...\nr\n.D4).......r....%j,(....4....I..]v..{+6....X>].\\......^F..$=t.....8..3.I.v.A...u\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 454, \"\"id\"\": 44399, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 37819, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103514, \"\"ack\"\": 2818113989, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"PA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63935, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TLS\"\", \"\"fields\"\": {\"\"type\"\": 23, \"\"version\"\": 771, \"\"len\"\": 409, \"\"iv\"\": \"\"\"\", \"\"msg\"\": \"\"[<TLSApplicationData  data=b'\\\\rq\\\\xfc@\\\\te\\\\x02\\\\x96r\\\\x8fu\\\\xa0 4\\\\xc8\\\\xf8\\\\xc7R\\\\x0c\\\\xa4\\\\r\\\\xa0pm\\\\x93\\\\xb5\\\\xeb\\\\x08\\\\xd6\\\\x92\\\\xb6+\\\\xee\\\\x9c\\\\xc4\\\\x05\\\\xbd\\\\x08=r\\\\x03}\\\\xec\\\\x88\\\\xc1+\\\\xbcW\\\\x93\\\\xd6=\\\\x88\\\\xf4\\\\xa2\\\\xa3\\\\xe6GR@\\\\xe53\\\\xf8%\\\\xe4\\\\xba\\\\x90#\\\\x83\\\\xec]\\\\xd0k)k\\\\xc4\\\\xae[\\\\xc5c\\\\x16@\\\\xbb\\\\xcc\\\\xb2\\\\xff\\\\x94\\\"\"\\\\xdcV\\\\x1f4D5\\\\x0b\\\\xbc\\\\xeb\\\\xb5-\\\\xd5\\\\xcdE\\\\xa5\\\\xfaK\\\"\"@\\\\'\\\\xdd^\\\\xca\\\\x81$\\\\xa6\\\\xf7\\\\xcb\\\\xe4LW\\\\x93\\\\xbbxXD\\\\x18\\\\x95\\\\xd2\\\\x96D\\\\x15\\\\x9b7\\\\x06q\\\\x06c\\\\x91K\\\\xbcM=\\\\xa0\\\\xe8\\\\x1e\\\\xaeJ\\\\xb9\\\\xe40\\\\xc9:\\\\x90\\\\x06\\\\x17\\\"\"\\\\x00\\\\x92\\\\x08\\\\x964]\\\\x03\\\\x17q\\\\xd8\\\\x1cZR\\\\x0b\\\\xb7;5\\\\xc9B\\\\x0ckp\\\\xd1\\\\xf2\\\\x0e\\\\x86\\\\xb6e=!\\\\x82O\\\\x90\\\\xcb\\\\xbc\\\\xfd\\\\xa8\\\\x13m\\\\x90\\\\x8a1\\\\xa2\\\\x16\\\\xb9W\\\\xf9\\\\xd6-\\\\x94>p\\\\xf6\\\\x7f=\\\\xf4\\\\xf57\\\\xa6\\\\x97\\\\xd3\\\\x82\\\\xe4#|F@\\\\xf8\\\\x05\\\\x0b/\\\\xad\\\\xe7\\\\xec(\\\\xe9X\\\\x9c\\\\xc6\\\\xbc\\\\xfb\\\\xd0\\\\xf7\\\\xcb\\\\x0c\\\\xaa\\\\x82\\\\xa9;0J\\\\x15\\\\x8c\\\\xc5\\\\x16\\\\x881\\\\x9b\\\\x18\\\\xd1\\\\xb5\\\\x9e$\\\\x0c\\\\x143\\\\xa3\\\\t\\\\xb2\\\\xf8\\\\xa651;\\\\xa5\\\\xf2\\\\xa6\\\\xe6\\\\xf5Ua\\\\xa99`4\\\\x92*$\\\\x80\\\\x06\\\\x91\\\\x86\\\\x98Q\\\\xde\\\\x95~\\\\xd4\\\\x82(\\\\xe5\\\\x9d>\\\\xefs=\\\\xe7y\\\\xb6\\\\xcb\\\\x9b\\\\xa8m!\\\\xc8\\\\xd6K|\\\\x9a\\\\xb6\\\"\"I\\\\x88\\\\x8c\\\\xa1 \\\\xf0-z\\\\xdb\\\\x01\\\\x13\\\\rr\\\\n\\\\xa1D4)\\\\x14\\\\xc9\\\\x90\\\\xcc\\\\xba\\\\x89\\\\x04r\\\\xcc\\\\x17\\\\xcc\\\\xf7%j,(\\\\xfb\\\\x80\\\\xd3\\\\x8a4\\\\xa0\\\\x12\\\\xd6\\\\x8eI\\\\xce\\\\x15]v\\\\x86\\\\x1c{+6\\\\x02\\\\x89\\\\xbf\\\\xb0X>]\\\\xdd\\\\\\\\\\\\x8d\\\\x95\\\\x0f\\\\xda\\\\x0b\\\\xf1^F\\\\x03\\\\x16$=t\\\\xd6\\\\xe5\\\\x86\\\\xce\\\\x158\\\\xb8\\\\xe23\\\\xddI\\\\xecv\\\\xc2A\\\\xb9\\\\xb7\\\\xecu' |>]\"\", \"\"mac\"\": \"\"\"\", \"\"pad\"\": null, \"\"padlen\"\": null}}]\"\n2026-05-25 06:02:47.152660,16,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113989 Ack=3507103928,bc24112907bbbc2411360d0c0800450000288a174000800678b10a98980bb81e9d45f9c401bba7f901c5d10a28b850102010f8bb0000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n(.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35351, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30897, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113989, \"\"ack\"\": 3507103928, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8208, \"\"chksum\"\": 63675, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:05:32.493064,17,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,FA,,,Ether > IP > TCP,3,TCP FA Seq=2818113989 Ack=3507103928,bc24112907bbbc2411360d0c0800450000288a184000800678b00a98980bb81e9d45f9c401bba7f901c5d10a28b850112010f8ba0000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n(.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35352, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30896, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113989, \"\"ack\"\": 3507103928, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 8208, \"\"chksum\"\": 63674, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:05:32.493184,18,TCP 184.30.157.69:443 -> 10.152.152.11:63940,184.30.157.69,10.152.152.11,443,63940,TCP,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,Internal,Private Network,,,,,,FA,,,Ether > IP > TCP,3,TCP FA Seq=3507103928 Ack=2818113990,bc2411360d0cbc24112907bb080045000028ad70400040069558b81e9d450a98980b01bbf9c4d10a28b8a7f901c65011003ff8210000,\".$.6\n..$.)....E..(.p@.@..X...E\n........\n(.....P..?.!..\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"src\"\": \"\"bc:24:11:29:07:bb\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 44400, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 64, \"\"proto\"\": 6, \"\"chksum\"\": 38232, \"\"src\"\": \"\"184.30.157.69\"\", \"\"dst\"\": \"\"10.152.152.11\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 443, \"\"dport\"\": 63940, \"\"seq\"\": 3507103928, \"\"ack\"\": 2818113990, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"FA\"\", \"\"window\"\": 63, \"\"chksum\"\": 63521, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n2026-05-25 06:05:32.493368,19,TCP 10.152.152.11:63940 -> 184.30.157.69:443,10.152.152.11,184.30.157.69,63940,443,TCP,Internal,Private Network,,,,,,The Netherlands,Haarlem,16625,\"Akamai Technologies, Inc.\",52.3803,4.6422,184.30.156.0/22,A,,,Ether > IP > TCP,3,TCP A Seq=2818113990 Ack=3507103929,bc24112907bbbc2411360d0c0800450000288a194000800678af0a98980bb81e9d45f9c401bba7f901c6d10a28b950102010f8b90000,\".$.)...$.6\n...E..(..@...x.\n......E.........\n(.P. .....\",,\"[{\"\"layer\"\": \"\"Ether\"\", \"\"fields\"\": {\"\"dst\"\": \"\"bc:24:11:29:07:bb\"\", \"\"src\"\": \"\"bc:24:11:36:0d:0c\"\", \"\"type\"\": 2048}}, {\"\"layer\"\": \"\"IP\"\", \"\"fields\"\": {\"\"version\"\": 4, \"\"ihl\"\": 5, \"\"tos\"\": 0, \"\"len\"\": 40, \"\"id\"\": 35353, \"\"flags\"\": \"\"DF\"\", \"\"frag\"\": 0, \"\"ttl\"\": 128, \"\"proto\"\": 6, \"\"chksum\"\": 30895, \"\"src\"\": \"\"10.152.152.11\"\", \"\"dst\"\": \"\"184.30.157.69\"\", \"\"options\"\": \"\"[]\"\"}}, {\"\"layer\"\": \"\"TCP\"\", \"\"fields\"\": {\"\"sport\"\": 63940, \"\"dport\"\": 443, \"\"seq\"\": 2818113990, \"\"ack\"\": 3507103929, \"\"dataofs\"\": 5, \"\"reserved\"\": 0, \"\"flags\"\": \"\"A\"\", \"\"window\"\": 8208, \"\"chksum\"\": 63673, \"\"urgptr\"\": 0, \"\"options\"\": \"\"[]\"\"}}]\"\n"},"html_report":"<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Global Network Analysis - Investigative Map</title>\n    <!-- Light Theme UI -->\n    <link rel=\"stylesheet\" href=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\" />\n    <script src=\"https://unpkg.com/leaflet@1.9.4/dist/leaflet.js\"></script>\n    <script src=\"https://d3js.org/d3.v7.min.js\"></script>\n    <link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\" />\n    <style>\n        :root {\n            --bg-page: #f8fafc;\n            --panel-bg: #ffffff;\n            --border-ui: #e2e8f0;\n            --text-primary: #1e293b;\n            --text-secondary: #64748b;\n            --accent-main: #3b82f6;\n            --accent-success: #10b981;\n            --accent-danger: #ef4444;\n            --shadow-ui: 0 4px 6px -1px rgba(0, 0, 0, 0.1);\n        }\n\n        body, html {\n            margin: 0;\n            padding: 0;\n            width: 100%;\n            height: 100%;\n            overflow: hidden;\n            font-family: 'Inter', system-ui, -apple-system, sans-serif;\n            background: var(--bg-page);\n            color: var(--text-primary);\n        }\n\n        #app-layout {\n            display: grid;\n            grid-template-columns: 1fr 400px;\n            grid-template-rows: 60px 1fr;\n            height: 100vh;\n            width: 100vw;\n        }\n\n        header {\n            grid-column: 1 / 3;\n            background: var(--panel-bg);\n            border-bottom: 1px solid var(--border-ui);\n            display: flex;\n            align-items: center;\n            padding: 0 24px;\n            justify-content: space-between;\n            z-index: 1000;\n        }\n\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 12px;\n            font-weight: 800;\n            font-size: 1.2rem;\n            color: var(--accent-main);\n        }\n\n        #map-view {\n            position: relative;\n            background: #eee;\n        }\n\n        #side-inspector {\n            background: var(--panel-bg);\n            border-left: 1px solid var(--border-ui);\n            display: flex;\n            flex-direction: column;\n            overflow: hidden;\n            box-shadow: -4px 0 10px rgba(0,0,0,0.02);\n        }\n\n        .inspector-header {\n            padding: 20px;\n            background: #f1f5f9;\n            border-bottom: 1px solid var(--border-ui);\n        }\n\n        .inspector-content {\n            flex: 1;\n            overflow-y: auto;\n            padding: 20px;\n        }\n\n        .info-card {\n            background: #f8fafc;\n            border: 1px solid var(--border-ui);\n            border-radius: 10px;\n            padding: 15px;\n            margin-bottom: 15px;\n        }\n\n        .sec-title {\n            font-size: 0.75rem;\n            text-transform: uppercase;\n            letter-spacing: 0.05em;\n            color: var(--text-secondary);\n            margin-bottom: 10px;\n            font-weight: 700;\n        }\n\n        .data-row {\n            display: flex;\n            justify-content: space-between;\n            margin-bottom: 6px;\n            font-size: 0.85rem;\n        }\n\n        .data-label {\n            color: var(--text-secondary);\n        }\n\n        .data-value {\n            font-weight: 600;\n            word-break: break-all;\n            text-align: right;\n        }\n\n        .packet-list-item {\n            padding: 10px;\n            border: 1px solid var(--border-ui);\n            border-radius: 6px;\n            margin-bottom: 8px;\n            cursor: pointer;\n            transition: all 0.2s;\n            font-size: 0.8rem;\n            display: flex;\n            justify-content: space-between;\n        }\n\n        .packet-list-item:hover {\n            background: #f1f5f9;\n            border-color: var(--accent-main);\n        }\n\n\n        .hex-dump {\n            font-family: 'Fira Code', 'Courier New', monospace;\n            background: #0f172a;\n            color: #38bdf8;\n            padding: 15px;\n            border-radius: 8px;\n            overflow: auto;\n            flex: 1;\n            font-size: 0.85rem;\n            line-height: 1.4;\n        }\n\n        .stat-grid {\n            display: grid;\n            grid-template-columns: repeat(3, 1fr);\n            gap: 15px;\n        }\n\n        .stat-box {\n            background: var(--panel-bg);\n            border: 1px solid var(--border-ui);\n            padding: 10px;\n            border-radius: 8px;\n            text-align: center;\n        }\n\n        .stat-v {\n            font-size: 1.2rem;\n            font-weight: 700;\n            color: var(--accent-main);\n        }\n\n        .stat-l {\n            font-size: 0.7rem;\n            color: var(--text-secondary);\n        }\n\n        .leaflet-d3-overlay {\n            pointer-events: none;\n        }\n\n        circle {\n            pointer-events: visiblePainted;\n            cursor: pointer;\n            transition: stroke-width 0.2s;\n        }\n\n        path.link {\n            stroke-opacity: 0.6;\n            fill: none;\n            cursor: pointer;\n        }\n\n        .replay-controller {\n            position: absolute;\n            bottom: 20px;\n            left: 50%;\n            transform: translateX(-50%);\n            background: white;\n            padding: 15px 25px;\n            border-radius: 12px;\n            display: flex;\n            align-items: center;\n            gap: 20px;\n            box-shadow: 0 10px 30px rgba(0,0,0,0.1);\n            z-index: 1001;\n            border: 1px solid var(--border-ui);\n            min-width: 500px;\n        }\n\n        .timeline-slider {\n            flex: 1;\n            -webkit-appearance: none;\n            height: 6px;\n            background: #e2e8f0;\n            border-radius: 5px;\n            outline: none;\n        }\n\n        .timeline-slider::-webkit-slider-thumb {\n            -webkit-appearance: none;\n            width: 18px;\n            height: 18px;\n            background: var(--accent-main);\n            border-radius: 50%;\n            cursor: pointer;\n            box-shadow: 0 2px 4px rgba(0,0,0,0.2);\n        }\n\n        .replay-btn {\n            background: var(--accent-main);\n            color: white;\n            border: none;\n            width: 36px;\n            height: 36px;\n            border-radius: 50%;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            cursor: pointer;\n            transition: transform 0.2s;\n        }\n\n        .replay-btn:hover {\n            transform: scale(1.1);\n        }\n\n        .packet-particle {\n            fill: var(--accent-main);\n            filter: drop-shadow(0 0 3px var(--accent-main));\n        }\n\n        .pvt-network-zone {\n            position: absolute;\n            top: 20px;\n            left: 20px;\n            width: 200px;\n            height: 150px;\n            border: 2px dashed #94a3b8;\n            border-radius: 10px;\n            background: rgba(248, 250, 252, 0.8);\n            pointer-events: none;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-size: 0.7rem;\n            color: #64748b;\n            text-transform: uppercase;\n            font-weight: 800;\n            z-index: 1000;\n        }\n    </style>\n</head>\n<body>\n    <div id=\"app-layout\">\n        <header>\n            <div class=\"brand\">\n                <i class=\"fas fa-microchip\"></i> FORENSIC GLOBAL ANALYZER\n            </div>\n            <div class=\"stat-grid\" style=\"gap: 40px;\">\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-nodes\">0</div>\n                    <div class=\"stat-l\">NODES</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-edges\">0</div>\n                    <div class=\"stat-l\">FLOWS</div>\n                </div>\n                <div class=\"stat-box\" style=\"border:none; background:none;\">\n                    <div class=\"stat-v\" id=\"stat-pkts\">0</div>\n                    <div class=\"stat-l\">PACKETS</div>\n                </div>\n            </div>\n            <div>\n                <button onclick=\"zoomToWorld()\" class=\"btn\" style=\"padding: 8px 15px; border:1px solid #ccc; border-radius:5px; background:white; cursor:pointer;\">\n                    <i class=\"fas fa-globe\"></i> Reset View\n                </button>\n            </div>\n        </header>\n\n        <div id=\"map-view\">\n            <div id=\"map\" style=\"width: 100%; height: 100%;\"></div>\n            <div class=\"pvt-network-zone\" id=\"pvt-zone\">Internal Assets</div>\n            \n            <div class=\"replay-controller\">\n                <button class=\"replay-btn\" id=\"play-pause\" onclick=\"toggleReplay()\">\n                    <i class=\"fas fa-play\" id=\"play-icon\"></i>\n                </button>\n                <input type=\"range\" class=\"timeline-slider\" id=\"timeline\" min=\"0\" max=\"100\" value=\"0\" oninput=\"seekReplay(this.value)\">\n                <div id=\"time-display\" style=\"font-family: monospace; font-size: 0.8rem; color: var(--text-secondary); width: 140px;\">00:00:00.000</div>\n            </div>\n\n            <div class=\"internal-nodes-tray\" id=\"internal-tray\" style=\"display:none;\">\n                <div class=\"sec-title\">Internal Assets</div>\n                <div id=\"internal-node-list\"></div>\n            </div>\n        </div>\n\n        <div id=\"side-inspector\">\n            <div class=\"inspector-header\">\n                <h2 id=\"inspect-title\">Selection Inspector</h2>\n                <p id=\"inspect-subtitle\" style=\"font-size: 0.8rem; color: var(--text-secondary);\">Select a node or flow on map</p>\n            </div>\n            <div class=\"inspector-content\" id=\"inspect-body\">\n                <div style=\"text-align: center; color: #94a3b8; margin-top: 50px;\">\n                    <i class=\"fas fa-search-location\" style=\"font-size: 3rem; margin-bottom: 20px;\"></i>\n                    <p>Analysis initialized. Click map elements or use replay to investigate flows.</p>\n                </div>\n            </div>\n        </div>\n    </div>\n\n    </div>\n\n    <script>\n        const nodes = [{\"id\": \"10.152.152.11\", \"ip\": \"10.152.152.11\", \"packet_count\": 19, \"total_bytes_sent\": 1359, \"total_bytes_received\": 4888, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [63940], \"first_seen\": 1779688965.999135, \"last_seen\": 1779689132.493368, \"packets\": [{\"num\": 0, \"time\": 1779688965.999135, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 1, \"time\": 1779688965.99916, \"size\": 66, \"direction\": \"received\"}, {\"num\": 2, \"time\": 1779688965.999475, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 3, \"time\": 1779688966.00003, \"size\": 240, \"direction\": \"sent\"}, {\"num\": 4, \"time\": 1779688966.000039, \"size\": 54, \"direction\": \"received\"}, {\"num\": 5, \"time\": 1779688966.337499, \"size\": 3470, \"direction\": \"received\"}, {\"num\": 6, \"time\": 1779688966.337692, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 7, \"time\": 1779688966.381723, \"size\": 340, \"direction\": \"received\"}, {\"num\": 8, \"time\": 1779688966.381995, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 9, \"time\": 1779688966.392725, \"size\": 180, \"direction\": \"sent\"}, {\"num\": 10, \"time\": 1779688966.392743, \"size\": 54, \"direction\": \"received\"}, {\"num\": 11, \"time\": 1779688966.761586, \"size\": 328, \"direction\": \"received\"}, {\"num\": 12, \"time\": 1779688966.767384, \"size\": 549, \"direction\": \"sent\"}, {\"num\": 13, \"time\": 1779688966.767411, \"size\": 54, \"direction\": \"received\"}, {\"num\": 14, \"time\": 1779688967.105333, \"size\": 468, \"direction\": \"received\"}, {\"num\": 15, \"time\": 1779688967.15266, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 16, \"time\": 1779689132.493064, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 17, \"time\": 1779689132.493184, \"size\": 54, \"direction\": \"received\"}, {\"num\": 18, \"time\": 1779689132.493368, \"size\": 54, \"direction\": \"sent\"}], \"is_private\": true, \"is_server\": true, \"is_client\": false, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"Internal\", \"city\": \"Private Network\", \"lat\": 0.0, \"lon\": 0.0, \"asn\": \"Unknown\", \"isp\": \"Unknown\", \"network\": \"Unknown\"}, \"duration\": 166.4942328929901, \"avg_packet_size\": 328.7894736842105, \"packets_per_second\": 0.11411806685347331}, {\"id\": \"184.30.157.69\", \"ip\": \"184.30.157.69\", \"packet_count\": 19, \"total_bytes_sent\": 4888, \"total_bytes_received\": 1359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"ports_used\": [443], \"first_seen\": 1779688965.999135, \"last_seen\": 1779689132.493368, \"packets\": [{\"num\": 0, \"time\": 1779688965.999135, \"size\": 66, \"direction\": \"received\"}, {\"num\": 1, \"time\": 1779688965.99916, \"size\": 66, \"direction\": \"sent\"}, {\"num\": 2, \"time\": 1779688965.999475, \"size\": 54, \"direction\": \"received\"}, {\"num\": 3, \"time\": 1779688966.00003, \"size\": 240, \"direction\": \"received\"}, {\"num\": 4, \"time\": 1779688966.000039, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 5, \"time\": 1779688966.337499, \"size\": 3470, \"direction\": \"sent\"}, {\"num\": 6, \"time\": 1779688966.337692, \"size\": 54, \"direction\": \"received\"}, {\"num\": 7, \"time\": 1779688966.381723, \"size\": 340, \"direction\": \"sent\"}, {\"num\": 8, \"time\": 1779688966.381995, \"size\": 54, \"direction\": \"received\"}, {\"num\": 9, \"time\": 1779688966.392725, \"size\": 180, \"direction\": \"received\"}, {\"num\": 10, \"time\": 1779688966.392743, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 11, \"time\": 1779688966.761586, \"size\": 328, \"direction\": \"sent\"}, {\"num\": 12, \"time\": 1779688966.767384, \"size\": 549, \"direction\": \"received\"}, {\"num\": 13, \"time\": 1779688966.767411, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 14, \"time\": 1779688967.105333, \"size\": 468, \"direction\": \"sent\"}, {\"num\": 15, \"time\": 1779688967.15266, \"size\": 54, \"direction\": \"received\"}, {\"num\": 16, \"time\": 1779689132.493064, \"size\": 54, \"direction\": \"received\"}, {\"num\": 17, \"time\": 1779689132.493184, \"size\": 54, \"direction\": \"sent\"}, {\"num\": 18, \"time\": 1779689132.493368, \"size\": 54, \"direction\": \"received\"}], \"is_private\": false, \"is_server\": false, \"is_client\": true, \"suspicious_score\": 0.0, \"geo\": {\"country\": \"The Netherlands\", \"city\": \"Haarlem\", \"lat\": 52.3803, \"lon\": 4.6422, \"asn\": 16625, \"isp\": \"Akamai Technologies, Inc.\", \"network\": \"184.30.156.0/22\"}, \"duration\": 166.4942328929901, \"avg_packet_size\": 328.7894736842105, \"packets_per_second\": 0.11411806685347331}];\n        const edges = [{\"source\": \"10.152.152.11\", \"target\": \"184.30.157.69\", \"packet_count\": 10, \"total_bytes\": 1359, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ports\": [63940], \"dst_ports\": [443], \"first_packet\": 1779688965.999135, \"last_packet\": 1779689132.493368, \"packets\": [{\"packet_number\": 0, \"timestamp\": 1779688965.999135, \"timestamp_iso\": \"2026-05-25T11:32:45.999135\", \"timestamp_human\": \"2026-05-25 11:32:45.999\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35344, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113181, \"tcp_ack\": 0, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": false, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN\"}, {\"packet_number\": 2, \"timestamp\": 1779688965.999475, \"timestamp_iso\": \"2026-05-25T11:32:45.999475\", \"timestamp_human\": \"2026-05-25 11:32:45.999\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35345, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113182, \"tcp_ack\": 3507099538, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 3, \"timestamp\": 1779688966.00003, \"timestamp_iso\": \"2026-05-25T11:32:46.000030\", \"timestamp_human\": \"2026-05-25 11:32:46.000\", \"size\": 240, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35346, \"ip_len\": 226, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113182, \"tcp_ack\": 3507099538, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 6, \"timestamp\": 1779688966.337692, \"timestamp_iso\": \"2026-05-25T11:32:46.337692\", \"timestamp_human\": \"2026-05-25 11:32:46.337\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35347, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113368, \"tcp_ack\": 3507102954, \"tcp_window\": 8212, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 8, \"timestamp\": 1779688966.381995, \"timestamp_iso\": \"2026-05-25T11:32:46.381995\", \"timestamp_human\": \"2026-05-25 11:32:46.381\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35348, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113368, \"tcp_ack\": 3507103240, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 9, \"timestamp\": 1779688966.392725, \"timestamp_iso\": \"2026-05-25T11:32:46.392725\", \"timestamp_human\": \"2026-05-25 11:32:46.392\", \"size\": 180, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35349, \"ip_len\": 166, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113368, \"tcp_ack\": 3507103240, \"tcp_window\": 8211, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 66, \"payload_preview\": \"4104a815176cafc80f90c522cbfb2b7ff5d6e5c3a56acda517f99da385bfd06d11ccf119531d5920d72e393b5b94c46acd452bbbc7dd043b9d130e2015af76046597\", \"payload_ascii\": \"A\\u0004\\u0015\\u0017l\\u000f\\\"+\\u007fj\\u0017m\\u0011\\u0019S\\u001dY .9;[jE+\\u0004;\\u0013\\u000e \\u0015v\\u0004e\"}, {\"packet_number\": 12, \"timestamp\": 1779688966.767384, \"timestamp_iso\": \"2026-05-25T11:32:46.767384\", \"timestamp_human\": \"2026-05-25 11:32:46.767\", \"size\": 549, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35350, \"ip_len\": 535, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113494, \"tcp_ack\": 3507103514, \"tcp_window\": 8210, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 15, \"timestamp\": 1779688967.15266, \"timestamp_iso\": \"2026-05-25T11:32:47.152660\", \"timestamp_human\": \"2026-05-25 11:32:47.152\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35351, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113989, \"tcp_ack\": 3507103928, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 16, \"timestamp\": 1779689132.493064, \"timestamp_iso\": \"2026-05-25T11:35:32.493064\", \"timestamp_human\": \"2026-05-25 11:35:32.493\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35352, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113989, \"tcp_ack\": 3507103928, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}, {\"packet_number\": 18, \"timestamp\": 1779689132.493368, \"timestamp_iso\": \"2026-05-25T11:35:32.493368\", \"timestamp_human\": \"2026-05-25 11:35:32.493\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"10.152.152.11\", \"dst_ip\": \"184.30.157.69\", \"ttl\": 128, \"ip_id\": 35353, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 63940, \"dst_port\": 443, \"tcp_seq\": 2818113990, \"tcp_ack\": 3507103929, \"tcp_window\": 8208, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 3, \"FIN\": 1}, \"packet_sizes\": [66, 54, 240, 54, 54, 180, 549, 54, 54, 54], \"inter_packet_intervals\": [0.0003399848937988281, 0.0005550384521484375, 0.3376619815826416, 0.044302940368652344, 0.01073002815246582, 0.37465906143188477, 0.38527584075927734, 165.3404040336609, 0.0003039836883544922], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 166.4942328929901, \"avg_packet_size\": 135.9, \"packets_per_second\": 0.06006214044919648, \"bytes_per_second\": 8.162444887045801, \"min_packet_size\": 54, \"max_packet_size\": 549, \"median_packet_size\": 54, \"avg_interval\": 18.499359210332234, \"min_interval\": 0.0003039836883544922, \"max_interval\": 165.3404040336609}, {\"source\": \"184.30.157.69\", \"target\": \"10.152.152.11\", \"packet_count\": 9, \"total_bytes\": 4888, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"Padding\", \"_TLSEncryptedContent\"], \"src_ports\": [443], \"dst_ports\": [63940], \"first_packet\": 1779688965.99916, \"last_packet\": 1779689132.493184, \"packets\": [{\"packet_number\": 1, \"timestamp\": 1779688965.99916, \"timestamp_iso\": \"2026-05-25T11:32:45.999160\", \"timestamp_human\": \"2026-05-25 11:32:45.999\", \"size\": 66, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 0, \"ip_len\": 52, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507099537, \"tcp_ack\": 2818113182, \"tcp_window\": 64240, \"tcp_dataofs\": 8, \"tcp_flags\": {\"FIN\": false, \"SYN\": true, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"SYN,ACK\"}, {\"packet_number\": 4, \"timestamp\": 1779688966.000039, \"timestamp_iso\": \"2026-05-25T11:32:46.000039\", \"timestamp_human\": \"2026-05-25 11:32:46.000\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44391, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507099538, \"tcp_ack\": 2818113368, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 5, \"timestamp\": 1779688966.337499, \"timestamp_iso\": \"2026-05-25T11:32:46.337499\", \"timestamp_human\": \"2026-05-25 11:32:46.337\", \"size\": 3470, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"Padding\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44392, \"ip_len\": 3456, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507099538, \"tcp_ack\": 2818113368, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 7, \"timestamp\": 1779688966.381723, \"timestamp_iso\": \"2026-05-25T11:32:46.381723\", \"timestamp_human\": \"2026-05-25 11:32:46.381\", \"size\": 340, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"_TLSEncryptedContent\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44395, \"ip_len\": 326, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507102954, \"tcp_ack\": 2818113368, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 286, \"payload_preview\": \"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\", \"payload_ascii\": \"n\\b\\tr\\f\\u0011Ve CX\\u0014\\u0015yWXL^ov:R\\u001d|}@-Tlcm\\u001esO;y$|K&~-yQ8M\\u0019bf\\u0004@!/-\\\"\\u0017\\u0016\\u0003\\u0003\\u0000\\f\\u0000\\u0000\\u0003\\u0000\\u0017A\\u0004\\tV`G\\u0002,+Dvi6\\u0004;*K\\u001d;\\\"\\u0013g\\u0000*eF\\u007f\\u0017qy+.BW\\u0004\\u0003\\u0000H0F\\u0002!\\u0000\\u0012\\u0003\\u0018e\\u0000%_N\\u001e$%|$\\u0015@p\\u0002!\\u0000\\u0016\\u0011al\\u000b:,\\u000es}E[\\u0016\\u0003\\u0003\\u0000\\u0004\\u000e\\u0000\\u0000\\u0000\"}, {\"packet_number\": 10, \"timestamp\": 1779688966.392743, \"timestamp_iso\": \"2026-05-25T11:32:46.392743\", \"timestamp_human\": \"2026-05-25 11:32:46.392\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44396, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103240, \"tcp_ack\": 2818113494, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 11, \"timestamp\": 1779688966.761586, \"timestamp_iso\": \"2026-05-25T11:32:46.761586\", \"timestamp_human\": \"2026-05-25 11:32:46.761\", \"size\": 328, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\", \"TLS\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44397, \"ip_len\": 314, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103240, \"tcp_ack\": 2818113494, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\", \"payload_size\": 40, \"payload_preview\": \"0d71fc40096502951755b15ef117b3d466cec143e922a3a82db0f9484129e99069b033550d31d9da\", \"payload_ascii\": \"\\rq@\\te\\u0002\\u0017U^\\u0017fC\\\"-HA)i3U\\r1\"}, {\"packet_number\": 13, \"timestamp\": 1779688966.767411, \"timestamp_iso\": \"2026-05-25T11:32:46.767411\", \"timestamp_human\": \"2026-05-25 11:32:46.767\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44398, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103514, \"tcp_ack\": 2818113989, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"ACK\"}, {\"packet_number\": 14, \"timestamp\": 1779688967.105333, \"timestamp_iso\": \"2026-05-25T11:32:47.105333\", \"timestamp_human\": \"2026-05-25 11:32:47.105\", \"size\": 468, \"protocols\": [\"Ether\", \"IP\", \"TCP\", \"TLS\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44399, \"ip_len\": 454, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103514, \"tcp_ack\": 2818113989, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": false, \"SYN\": false, \"RST\": false, \"PSH\": true, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"PSH,ACK\"}, {\"packet_number\": 17, \"timestamp\": 1779689132.493184, \"timestamp_iso\": \"2026-05-25T11:35:32.493184\", \"timestamp_human\": \"2026-05-25 11:35:32.493\", \"size\": 54, \"protocols\": [\"Ether\", \"IP\", \"TCP\"], \"src_ip\": \"184.30.157.69\", \"dst_ip\": \"10.152.152.11\", \"ttl\": 64, \"ip_id\": 44400, \"ip_len\": 40, \"ip_flags\": {\"DF\": true, \"MF\": false}, \"ip_proto\": 6, \"src_port\": 443, \"dst_port\": 63940, \"tcp_seq\": 3507103928, \"tcp_ack\": 2818113990, \"tcp_window\": 63, \"tcp_dataofs\": 5, \"tcp_flags\": {\"FIN\": true, \"SYN\": false, \"RST\": false, \"PSH\": false, \"ACK\": true, \"URG\": false, \"ECE\": false, \"CWR\": false}, \"tcp_flags_str\": \"FIN,ACK\"}], \"tcp_flags\": {\"SYN\": 1, \"ACK\": 9, \"PSH\": 4, \"FIN\": 1}, \"packet_sizes\": [66, 54, 3470, 340, 54, 328, 54, 468, 54], \"inter_packet_intervals\": [0.0008790493011474609, 0.3374598026275635, 0.04422402381896973, 0.011020183563232422, 0.36884284019470215, 0.005825042724609375, 0.3379220962524414, 165.38785099983215], \"connection_type\": \"TCP Connection\", \"threat_level\": \"low\", \"duration\": 166.49402403831482, \"avg_packet_size\": 543.1111111111111, \"packets_per_second\": 0.05405599421351516, \"bytes_per_second\": 29.35841107951801, \"min_packet_size\": 54, \"max_packet_size\": 3470, \"median_packet_size\": 66, \"avg_interval\": 20.811753004789352, \"min_interval\": 0.0008790493011474609, \"max_interval\": 165.38785099983215}];\n        \n        // Unified Timeline Data\n        const allPackets = [];\n        edges.forEach(e => {\n            e.packets.forEach(p => {\n                allPackets.push({\n                    ...p,\n                    source: e.source,\n                    target: e.target,\n                    protocols: p.protocols\n                });\n            });\n        });\n        allPackets.sort((a, b) => a.timestamp - b.timestamp);\n\n        // Map Setup\n        const map = L.map('map', {\n            center: [20, 0],\n            zoom: 2,\n            minZoom: 2,\n            maxBounds: [[-90, -180], [90, 180]],\n            maxBoundsViscosity: 1.0,\n            worldCopyJump: false\n        });\n\n        L.tileLayer('https://{s}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}{r}.png', {\n            attribution: '©OpenStreetMap, ©CartoDB',\n            noWrap: true,\n            bounds: [[-90, -180], [90, 180]]\n        }).addTo(map);\n\n        // Projection Helper for Private IPs\n        function getPos(node) {\n            if (node.is_private) {\n                // Place private nodes in the stylized \"Pvt Zone\" (North Pacific area)\n                // Offset slightly per node to avoid overlap\n                const idx = nodes.filter(n => n.is_private).indexOf(node);\n                const pvtLat = 50 + (idx % 5) * 2;\n                const pvtLon = -160 + Math.floor(idx / 5) * 5;\n                return [pvtLat, pvtLon];\n            }\n            return [node.geo.lat || 0, node.geo.lon || 0];\n        }\n\n        // Initialize positions\n        nodes.forEach(n => {\n            const pos = getPos(n);\n            n.currentLat = pos[0];\n            n.currentLon = pos[1];\n        });\n\n        // D3 Overlay\n        L.svg().addTo(map);\n        const svg = d3.select(map.getPanes().overlayPane).select(\"svg\");\n        const g = svg.append(\"g\").attr(\"class\", \"leaflet-zoom-hide\");\n\n        // Scale node radius by traffic volume\n        const nodeScale = d3.scaleSqrt()\n            .domain([0, d3.max(nodes, d => d.packet_count) || 100])\n            .range([5, 20]);\n\n        const link = g.selectAll(\".link\")\n            .data(edges)\n            .enter().append(\"path\")\n            .attr(\"class\", \"link\")\n            .attr(\"stroke\", e => e.threat_level === 'critical' ? '#ef4444' : '#94a3b8')\n            .attr(\"stroke-width\", 1.5)\n            .on(\"click\", (e, d) => inspectFlow(d));\n\n        const node = g.selectAll(\".node\")\n            .data(nodes)\n            .enter().append(\"circle\")\n            .attr(\"class\", \"node\")\n            .attr(\"r\", d => nodeScale(d.packet_count))\n            .attr(\"fill\", d => d.is_private ? \"#3b82f6\" : \"#10b981\")\n            .attr(\"stroke\", \"#fff\")\n            .attr(\"stroke-width\", 2)\n            .on(\"click\", (e, d) => inspectNode(d));\n\n        node.append(\"title\").text(d => d.ip);\n\n        function updatePositions() {\n            node.attr(\"cx\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).x)\n                .attr(\"cy\", d => map.latLngToLayerPoint([d.currentLat, d.currentLon]).y);\n\n            link.attr(\"d\", d => {\n                const s = nodes.find(n => n.id === d.source);\n                const t = nodes.find(n => n.id === d.target);\n                if (!s || !t) return \"\";\n                const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n                const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n                return `M${sp.x},${sp.y}L${tp.x},${tp.y}`;\n            });\n        }\n\n        map.on(\"viewreset move\", updatePositions);\n        updatePositions();\n\n        // Stats\n        document.getElementById('stat-nodes').innerText = nodes.length;\n        document.getElementById('stat-edges').innerText = edges.length;\n        document.getElementById('stat-pkts').innerText = allPackets.length;\n\n        // --- Replay Logic ---\n        let replayIdx = 0;\n        let isPlaying = false;\n        let replayTimer = null;\n        const timeline = document.getElementById('timeline');\n        const timeDisplay = document.getElementById('time-display');\n\n        function toggleReplay() {\n            isPlaying = !isPlaying;\n            document.getElementById('play-icon').className = isPlaying ? \"fas fa-pause\" : \"fas fa-play\";\n            if (isPlaying) runReplay();\n            else clearInterval(replayTimer);\n        }\n\n        function runReplay() {\n            clearInterval(replayTimer);\n            replayTimer = setInterval(() => {\n                if (replayIdx >= allPackets.length) {\n                    toggleReplay();\n                    return;\n                }\n                processPacket(allPackets[replayIdx]);\n                replayIdx++;\n                const progress = (replayIdx / allPackets.length) * 100;\n                timeline.value = progress;\n            }, 150);\n        }\n\n        function seekReplay(val) {\n            const targetIdx = Math.floor((val / 100) * (allPackets.length - 1));\n            replayIdx = targetIdx;\n            if (allPackets[replayIdx]) {\n                processPacket(allPackets[replayIdx]);\n            }\n        }\n\n        function processPacket(pkt) {\n            timeDisplay.innerText = pkt.timestamp_human.split(' ')[1];\n            animatePacket(pkt.source, pkt.target);\n            updateLiveInspector(pkt);\n        }\n\n        function animatePacket(srcId, dstId) {\n            const s = nodes.find(n => n.id === srcId);\n            const t = nodes.find(n => n.id === dstId);\n            if (!s || !t) return;\n            \n            const sp = map.latLngToLayerPoint([s.currentLat, s.currentLon]);\n            const tp = map.latLngToLayerPoint([t.currentLat, t.currentLon]);\n\n            const p = g.append(\"circle\")\n                .attr(\"r\", 4)\n                .attr(\"class\", \"packet-particle\")\n                .attr(\"cx\", sp.x)\n                .attr(\"cy\", sp.y);\n\n            p.transition()\n                .duration(800)\n                .ease(d3.easeLinear)\n                .attr(\"cx\", tp.x)\n                .attr(\"cy\", tp.y)\n                .remove();\n        }\n\n        function updateLiveInspector(pkt) {\n            const srcNode = nodes.find(n => n.id === pkt.source);\n            const dstNode = nodes.find(n => n.id === pkt.target);\n            \n            const body = document.getElementById('inspect-body');\n            \n            // Format payload\n            let payloadHtml = \"\";\n            if (pkt.payload_preview) {\n                const hex = pkt.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (pkt.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 150px; overflow-y: auto; font-size: 0.7rem;\">${pkt.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Live Replay Analysis</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Packet ID</span><span class=\"data-value\">#${pkt.packet_number}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${pkt.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${pkt.protocols.join(' → ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Size</span><span class=\"data-value\">${pkt.size} Bytes</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Source: ${pkt.source}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${srcNode.geo.city}, ${srcNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${srcNode.geo.isp} (AS${srcNode.geo.asn})</span></div>\n                </div>\n\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Destination: ${pkt.target}</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Location</span><span class=\"data-value\">${dstNode.geo.city}, ${dstNode.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP / ASN</span><span class=\"data-value\">${dstNode.geo.isp} (AS${dstNode.geo.asn})</span></div>\n                </div>\n\n                ${pkt.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Flags</div><div class=\"data-value\">${pkt.tcp_flags_str}</div></div>` : ''}\n                ${pkt.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query</div><div class=\"data-value\">${pkt.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data</div>'}\n                </div>\n            `;\n        }\n\n        function inspectNode(d) {\n            document.getElementById('inspect-title').innerText = `Node: ${d.ip}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Investigation Metadata</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Country</span><span class=\"data-value\">${d.geo.country}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">City</span><span class=\"data-value\">${d.geo.city}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ISP</span><span class=\"data-value\">${d.geo.isp}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">ASN</span><span class=\"data-value\">${d.geo.asn}</span></div>\n                </div>\n                <div class=\"sec-title\">Traffic Intensity</div>\n                <div class=\"stat-grid\">\n                    <div class=\"stat-box\"><div class=\"stat-v\">${d.packet_count}</div><div class=\"stat-l\">Packets</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_sent/1024).toFixed(1)}</div><div class=\"stat-l\">KB Sent</div></div>\n                    <div class=\"stat-box\"><div class=\"stat-v\">${(d.total_bytes_received/1024).toFixed(1)}</div><div class=\"stat-l\">KB Recv</div></div>\n                </div>\n                <div class=\"sec-title\" style=\"margin-top:20px;\">Recent Packets</div>\n                ${d.packets.slice(-10).map(p => {\n                    const pStr = JSON.stringify(p).replace(/\"/g, '&quot;');\n                    return `\n                        <div class=\"packet-list-item\" onclick=\"showPacketDetails('${d.ip}', ${pStr})\">\n                            <span>#${p.num} - ${p.direction.toUpperCase()}</span>\n                            <span>${p.size}B</span>\n                        </div>\n                    `;\n                }).join('')}\n            `;\n        }\n\n        function inspectFlow(d) {\n            const s = nodes.find(n => n.id === d.source);\n            const t = nodes.find(n => n.id === d.target);\n            document.getElementById('inspect-title').innerText = `Flow: ${d.source} → ${d.target}`;\n            const body = document.getElementById('inspect-body');\n            body.innerHTML = `\n                <div class=\"info-card\">\n                    <div class=\"sec-title\">Flow Characteristics</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${d.protocols.join(', ')}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Total Traffic</span><span class=\"data-value\">${(d.total_bytes / 1024).toFixed(2)} KB</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Threat Level</span><span class=\"data-value\" style=\"color:${d.threat_level === 'low' ? 'var(--accent-success)' : 'var(--accent-danger)'}\">${d.threat_level.toUpperCase()}</span></div>\n                </div>\n                <div class=\"sec-title\">Packet Log</div>\n                ${d.packets.slice(-15).map(p => `\n                    <div class=\"packet-list-item\" style=\"border-left: 3px solid var(--accent-main)\">\n                        <div>\n                            <div style=\"font-weight:700\">#${p.packet_number} [${p.protocols[p.protocols.length-1]}]</div>\n                            <div style=\"font-size:0.75rem; color:var(--text-secondary)\">${p.timestamp_human.split(' ')[1]}</div>\n                        </div>\n                        <div style=\"text-align:right\">\n                            <div>${p.size}B</div>\n                        </div>\n                    </div>\n                `).join('')}\n            `;\n        }\n\n        function showPacketDetails(ip, p) {\n            const body = document.getElementById('inspect-body');\n            document.getElementById('inspect-title').innerText = `Packet Inspection`;\n            document.getElementById('inspect-subtitle').innerText = `IP: ${ip}`;\n            \n            let payloadHtml = \"\";\n            if (p.payload_preview) {\n                const hex = p.payload_preview.match(/.{1,2}/g).join(' ');\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (Hex)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${hex}</div>\n                `;\n            } else if (p.payload_ascii) {\n                payloadHtml = `\n                    <div class=\"sec-title\">Payload (ASCII)</div>\n                    <div class=\"hex-dump\" style=\"max-height: 200px; overflow-y: auto; font-size: 0.7rem;\">${p.payload_ascii}</div>\n                `;\n            }\n\n            body.innerHTML = `\n                <div class=\"info-card\" style=\"border-left: 4px solid var(--accent-main)\">\n                    <div class=\"sec-title\">Packet Details</div>\n                    <div class=\"data-row\"><span class=\"data-label\">Timestamp</span><span class=\"data-value\">${p.timestamp_human}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Protocols</span><span class=\"data-value\">${p.protocols ? p.protocols.join(' → ') : 'N/A'}</span></div>\n                    <div class=\"data-row\"><span class=\"data-label\">Byte Size</span><span class=\"data-value\">${p.size}</span></div>\n                </div>\n\n                ${p.tcp_flags_str ? `<div class=\"info-card\"><div class=\"sec-title\">TCP Control Flags</div><div class=\"data-value\">${p.tcp_flags_str}</div></div>` : ''}\n                ${p.dns_query ? `<div class=\"info-card\"><div class=\"sec-title\">DNS Query Resolve</div><div class=\"data-value\">${p.dns_query}</div></div>` : ''}\n\n                <div class=\"info-card\">\n                    ${payloadHtml || '<div class=\"data-label\">No raw payload data available</div>'}\n                </div>\n                \n                <button class=\"btn\" onclick=\"zoomToWorld()\" style=\"width:100%; margin-top:10px; padding:10px;\">Return to Overview</button>\n            `;\n        }\n\n        function closePacketPanel() {\n            // No longer used as we use the side panel\n        }\n\n        function zoomToWorld() {\n            map.flyTo([20, 0], 2);\n        }\n    </script>\n</body>\n</html>\n"}]